8d7e02176767bc026c83544eea75bde0_JaffaCakes118

General

Target

8d7e02176767bc026c83544eea75bde0_JaffaCakes118
Size

48KB
MD5

8d7e02176767bc026c83544eea75bde0
SHA1

6fa8e23d415d8cf8d4362892d967c325b65dfb33
SHA256

96fbaabb50ab94cffcd13d57a5c010a08dd5b977e4df7ca3352789336de0209e
SHA512

f50925dcb013637450b3c451299a9bd14db6659e4cd04e4922f2ba359bf79dffad6481782e8c6b19f6344d07453a8000c72503df074d1ae06d51a5771893fa7a
SSDEEP

384:Aar2d0oWoIXQ4q1U1HbOUmxaiqa3mlWlDqDej3qFHa4bnk7fy2YteahcamP4DoS:Aar9ROTAlYqSzK6Cnk7fVauaNDo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d7e02176767bc026c83544eea75bde0_JaffaCakes118

Files

8d7e02176767bc026c83544eea75bde0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b58c4f1d7fe1fd4cdd87e8ad57d0abb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
lstrlenA
GetModuleFileNameA
GetCurrentProcessId
CopyFileA
Sleep
TerminateProcess
OpenProcess
DeleteFileA
GetCurrentDirectoryA
GetEnvironmentVariableA
DeviceIoControl
CreateFileA
CloseHandle
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
LoadLibraryA
LCMapStringA
GetProcAddress
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
SetFilePointer
ReadFile
LCMapStringW
GetLastError
HeapReAlloc
VirtualAlloc
VirtualFree
HeapAlloc
HeapFree
ExitProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate

user32

SetTimer
TranslateMessage
GetMessageA
DispatchMessageA
wsprintfA
IsWindow
FindWindowExA

advapi32

RegSetValueExA
RegCreateKeyA

shell32

ShellExecuteA

wsock32

closesocket
send
connect
htons
socket
gethostbyname
WSAStartup
recv
WSACleanup

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b58c4f1d7fe1fd4cdd87e8ad57d0abb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wsock32

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 256B

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 256B