893cdd5305dc6c7e4d8fd64add9391d7_JaffaCakes118

General

Target

893cdd5305dc6c7e4d8fd64add9391d7_JaffaCakes118
Size

2.1MB
MD5

893cdd5305dc6c7e4d8fd64add9391d7
SHA1

1dee16b7d2a3743b487289d8e70160f49616aa6f
SHA256

ac0d45b2ea0e7fbbfab88e2d41b06a48cb4089b05848d2994479b4e839431388
SHA512

9a219fba8360f97c4d422e911cda983fffba8f181a2f1ead8faa24c7225126ae9a5b7e5920f4131f80228f9e506f7bb3c6c81f1ec8e42614e08352b4e29c7c0a
SSDEEP

24576:Ag6119vpVU7wiCyuIYTKcCLYESr9QCKkd3oCctVr+JK1mLD5+ZjePeVUUZOYvB0J:Ag6HVjyii8E4ld3oC8+hXBPYb7WOk5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
893cdd5305dc6c7e4d8fd64add9391d7_JaffaCakes118

Files

893cdd5305dc6c7e4d8fd64add9391d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
WSAInstallServiceClassW
sendto
WSASendDisconnect
WSASocketW
ioctlsocket
gethostbyaddr
inet_addr

oleaut32

SysFreeString
SafeArrayRedim

kernel32

ExitThread
GetConsoleMode
GetShortPathNameW
IsBadStringPtrA
CreateIoCompletionPort
GetTempPathW
GetDiskFreeSpaceExA
CreateProcessA
GetCurrentProcessId
ExitProcess
GetThreadContext
SetupComm
OpenMutexA
SwitchToFiber
VirtualAllocEx

user32

GetTopWindow
LoadStringA
CreateIconFromResource
GetMessageA
EnumDisplayDevicesA
AppendMenuA
mouse_event
GetWindowContextHelpId
SendNotifyMessageA
PeekMessageW
CreateDialogIndirectParamA
SetCaretPos
GetIconInfo
GetTabbedTextExtentA
ExcludeUpdateRgn
SetThreadDesktop
IsDialogMessageW
GetMonitorInfoA

advapi32

AccessCheckAndAuditAlarmW
AllocateLocallyUniqueId
SetKernelObjectSecurity
EqualSid
IsValidAcl
BuildTrusteeWithSidW
SetSecurityDescriptorDacl
AddAce
ChangeServiceConfigW
StartServiceW
GetAclInformation
ObjectCloseAuditAlarmA
RegQueryValueA
SetSecurityDescriptorGroup
RegFlushKey
GetPrivateObjectSecurity
UnlockServiceDatabase

comctl32

ImageList_GetBkColor
ImageList_SetImageCount

Sections

.text
Size: 3KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

Imports

ws2_32

oleaut32

kernel32

user32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 251KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 3KB - Virtual size: 251KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB