a20ac1b06c669a9223f77541e56cbfe5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a20ac1b06c669a9223f77541e56cbfe5_JaffaCakes118
Size

35KB
MD5

a20ac1b06c669a9223f77541e56cbfe5
SHA1

81593be38f454ab9ecc45d8ef083205800ce67a1
SHA256

c0f598d3ca958827a2f681bec03dd5e18647501455e67a8435eb503881137946
SHA512

68c271dd458ef36c6bba3c8828a861854290be623341520390db2eca6b25eb0ccd02f7691d5e0bfddde6531b752f5d4d14c112004b17287be7d058f7cca38484
SSDEEP

768:D4+FmwoX08YX2aqsKmqxfPdFqKkcE/oH3jJnO:0+FmRvsCfPVknU3jJnO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a20ac1b06c669a9223f77541e56cbfe5_JaffaCakes118

Files

a20ac1b06c669a9223f77541e56cbfe5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf0968e842fb7cd689b7f965a55c79a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
sprintf
strcmp
strncmp
strncpy
strlen
memcpy
strcat
memmove
localtime
mktime
gmtime

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
SetLocalTime
GetProcAddress
GetSystemDirectoryA
HeapFree
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
CloseHandle
GetVersionExA
LoadLibraryA
DeleteCriticalSection
CreateThread
Sleep
GetCommandLineA
GetTickCount
FreeLibrary
CreateDirectoryA
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
WriteFile
CreateFileA
SetFilePointer
ReadFile
WaitForMultipleObjects
HeapReAlloc
ResetEvent
SetEvent
TlsGetValue
TlsSetValue
GetCurrentProcess
GetCurrentThread
DuplicateHandle
TlsAlloc
CreateEventA
GetLocalTime

user32

GetWindow
SetActiveWindow
RemovePropA
SendMessageA
DestroyWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRect
GetSystemMetrics
GetActiveWindow
GetWindowRect
CreateWindowExA
SetPropA
ShowWindow
CreateAcceleratorTableA
SetCursorPos
LoadImageA
SetCursor
GetWindowLongA
GetParent
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
GetPropA
GetClientRect
FillRect
EnumChildWindows
DefFrameProcA
DefWindowProcA
IsWindowEnabled
IsWindowVisible
SetFocus
GetFocus
IsChild
GetClassNameA

gdi32

DeleteObject
GetStockObject

advapi32

SetServiceStatus

comctl32

InitCommonControlsEx

ole32

RevokeDragDrop

wsock32

ioctlsocket
accept
inet_addr
htons
gethostbyname
socket
WSAStartup
shutdown
closesocket
bind
connect
listen
select
recv
send
recvfrom
sendto
WSACleanup
gethostname

Sections

.code
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 205B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf0968e842fb7cd689b7f965a55c79a2

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

comctl32

ole32

wsock32

Sections

.code Size: 13KB - Virtual size: 13KB

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 512B - Virtual size: 205B

.data Size: 4KB - Virtual size: 47KB

.rsrc Size: 1024B - Virtual size: 700B

.code
Size: 13KB - Virtual size: 13KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 512B - Virtual size: 205B

.data
Size: 4KB - Virtual size: 47KB

.rsrc
Size: 1024B - Virtual size: 700B