8d5c5c683eb85d2ec0014ab2e46098e1_JaffaCakes118

General

Target

8d5c5c683eb85d2ec0014ab2e46098e1_JaffaCakes118
Size

24KB
MD5

8d5c5c683eb85d2ec0014ab2e46098e1
SHA1

567e33df703936b68b23bac968e71bd653913287
SHA256

a1399d9c8c467c1a491f3290bbb8a39256ab2a808508e59ea632cfc754f2188c
SHA512

810aeb615a56b515aca8f2911cb063ef475886099b3a77ebd003d3d381a383c78a421c59f2a37462af0ac7b8a9b155c3661ed62275afbd8e1f1bcbc6e79b8d23
SSDEEP

384:kgz6k+eg//eeAfwzpvnzc2ubw3QtFJAzQbyPdH4nxQ4amY6L:Rz6k+5awz1c2haEYxza4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d5c5c683eb85d2ec0014ab2e46098e1_JaffaCakes118

Files

8d5c5c683eb85d2ec0014ab2e46098e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

286828e5b85d5f480faab0545006f14f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocConsole
FreeLibrary
ExitProcess
GetModuleFileNameA
GetModuleHandleA
CreateThread
Sleep
GetComputerNameA
SetEvent
CreateEventA
WaitForSingleObject
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
lstrcpyA
ExitThread

user32

wsprintfA
FindWindowA
ShowWindow

advapi32

RegEnumKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

wsock32

send
recv
connect
WSACleanup
htons
gethostbyname
socket
WSAStartup
closesocket
inet_addr
shutdown
select
listen
bind
getpeername
accept

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_chkesp
??3@YAXPAX@Z
strcat
memset
??2@YAPAXI@Z
strcpy
strcmp
sprintf
_filbuf
strtok
memcpy
fclose
fwrite
fopen
strncmp
strstr
strncpy
realloc
strlen
malloc
printf
rand
srand
time
_iob
_exit
_XcptFilter
exit
__p___initenv

Sections

.data
Size: 18KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

286828e5b85d5f480faab0545006f14f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wsock32

msvcrt

Sections

.data Size: 18KB - Virtual size: 39KB

.idata Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 39KB

.idata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB