8b0c4b5f159f9a7f4128fc90b6bd5d0b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8b0c4b5f159f9a7f4128fc90b6bd5d0b_JaffaCakes118
Size

31KB
MD5

8b0c4b5f159f9a7f4128fc90b6bd5d0b
SHA1

6f5edd828d5e4f4305025f625089466687811156
SHA256

f7d55f8ad9063bf9295941bb5aaa5ed301569f5b416d2ed96b7e9adf991366a5
SHA512

df7d36b632de6c69cc220ef8e772079fd459af6a56c0490c44b9e5e471630bdc6a90aa25f50ca4b41258659675a4a09695fd6dcebc035812b1383cd82b257afe
SSDEEP

384:lZlb+euMs2GTBI1utyyykpRb3lTwgSby1Iml9wF/36RCJiCsZQC6yntQeedTo:lbSjpTBbdbdwg3gcRkiCaHntWdk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b0c4b5f159f9a7f4128fc90b6bd5d0b_JaffaCakes118

Files

8b0c4b5f159f9a7f4128fc90b6bd5d0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84eb61123c337fdfab60b61bcb9f62e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
connect
socket
htons
send
select
ioctlsocket
inet_addr
gethostname
WSAStartup
inet_ntoa
WSACleanup
closesocket
recv

shell32

ShellExecuteA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyA

kernel32

RaiseException
LocalFree
FlushFileBuffers
SetStdHandle
LoadLibraryA
SetUnhandledExceptionFilter
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadCodePtr
GetOEMCP
ExitProcess
Sleep
GetLastError
GetModuleHandleA
GetCurrentProcess
GetProcAddress
GetTempPathA
GetTickCount
ExitThread
GlobalFree
CloseHandle
WriteFile
lstrlenA
CreateFileA
CopyFileA
GetDriveTypeA
GetLogicalDriveStringsA
SetFileAttributesA
lstrcatA
GetModuleFileNameA
GlobalAlloc
CreateThread
FindClose
FindNextFileA
FindFirstFileA
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
WinExec
GetSystemDirectoryA
GetVersionExA
GetLocaleInfoA
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
GetCommandLineA
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetStartupInfoA
HeapAlloc
GetEnvironmentStrings

user32

BlockInput
SetForegroundWindow
SetFocus
ShowWindow
wsprintfA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FindWindowA
VkKeyScanA
keybd_event

shlwapi

PathFileExistsA

urlmon

URLDownloadToFileA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
VariantInit
VariantClear

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

84eb61123c337fdfab60b61bcb9f62e0

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

kernel32

user32

shlwapi

urlmon

ole32

oleaut32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 12KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 12KB