890e886f880db68a31a14bda3aadc3d3_JaffaCakes118

General

Target

890e886f880db68a31a14bda3aadc3d3_JaffaCakes118
Size

38KB
MD5

890e886f880db68a31a14bda3aadc3d3
SHA1

3c84b61271a782049d2445500b876d89894eec7f
SHA256

a2b7c29ee61c4145f7d17dcee4267209f85135754a15fbbb3e309d47a5949e31
SHA512

f2e491ca85a866999d9be3edddfe8073f9a74f4ff6680a0b510fb6d472f33934bace5b6af1053c64f647d926d1437f6e509882bee8cfab003e2149bd7b414fd2
SSDEEP

384:PZQ3Bun4NZ2sLJxkyU31xM52xvBv2RyGkpMSnwdB6UmVlbcUn3k9gBJJiooJ0KOu:T8XLbDUvG232gM/HQa9Y7FE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
890e886f880db68a31a14bda3aadc3d3_JaffaCakes118

Files

890e886f880db68a31a14bda3aadc3d3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceW
InterlockedExchange
GetCurrentProcess
GetLastError
PurgeComm
AllocConsole
FatalExit
GetConsoleNlsMode
FindAtomW
DeleteTimerQueue
GetCurrentThreadId
GetTempPathW
GetUserDefaultLCID
GlobalAlloc
SetUnhandledExceptionFilter
ClearCommBreak
CreateMemoryResourceNotification
CreateFileW
AddAtomW
ExitThread
TerminateProcess
DeleteCriticalSection
GetModuleHandleW
CancelIo
OpenConsoleW
EnumDateFormatsExW
CreateMutexW
GlobalAddAtomW
CancelTimerQueueTimer
VirtualAlloc

msvcrt

_chgsign
_close
_assert
_beep
_access
_cabs
_atoldbl
_chdir
_cgetws
_atoi64

ws2_32

bind
WSACleanup
closesocket
socket
WSAStartup
WSALookupServiceNextW
listen

Sections

.data
Size: - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.data Size: - Virtual size: 522KB

.text Size: 31KB - Virtual size: 30KB

.bss Size: 512B - Virtual size: 256B

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 576B

.rsrc Size: 3KB - Virtual size: 23KB

.data
Size: - Virtual size: 522KB

.text
Size: 31KB - Virtual size: 30KB

.bss
Size: 512B - Virtual size: 256B

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 3KB - Virtual size: 23KB