ad1445f81de3964ade81546ef325c11f_JaffaCakes118

General

Target

ad1445f81de3964ade81546ef325c11f_JaffaCakes118
Size

28KB
MD5

ad1445f81de3964ade81546ef325c11f
SHA1

540517e803d891e7cb88e9726371c7fd5c3f3f49
SHA256

2b860d931b936b601c61fd0af8f74faace11ac8a7aabc701f6c77f6e16e00c6f
SHA512

497d8f813564ae8ed8a326ca6e9396779f105265bca64cca660ac87797ad58fb54c87ccf876f1e2a39650aaffa696a35cd890171389d47cbaa711b94a04b9e64
SSDEEP

768:qiJK3xcR+KOqZG1vve0SmQVNU6nUdU+iUcHedhdKP:qiJkasTqZYSmYd+RDdg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad1445f81de3964ade81546ef325c11f_JaffaCakes118

Files

ad1445f81de3964ade81546ef325c11f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62882e9956bffe411eaeb7f489f0ca9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
inet_ntoa
WSAStartup
WSACleanup
gethostname

oleaut32

GetErrorInfo

msvcrt

__getmainargs
_strupr
atoi
??3@YAXPAX@Z
__p__commode
_exit
??1type_info@@UAE@XZ
_XcptFilter
isspace
sprintf
__setusermatherr
_CxxThrowException
strstr
_stricmp
strchr
_except_handler3
_initterm
_controlfp
time
_adjust_fdiv
_strnicmp
rand
srand
__CxxFrameHandler
__p__fmode
__set_app_type
_acmdln
??2@YAPAXI@Z
exit

kernel32

GetProcAddress
GetFileSize
LoadLibraryA
LocalFree
WaitForSingleObject
PeekNamedPipe
WriteFile
lstrlenA
GetSystemDirectoryA
DeleteFileA
SetFilePointer
ReadFile
FreeLibrary
lstrcpyA
GetStartupInfoA
GetVersionExA
lstrcmpA
CreateFileA
GetTempPathA
CloseHandle
Sleep
CreateProcessA
GetModuleHandleA
GetLastError

advapi32

GetUserNameA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

user32

wsprintfA

shlwapi

PathFileExistsA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62882e9956bffe411eaeb7f489f0ca9d

Headers

File Characteristics

Imports

ws2_32

oleaut32

msvcrt

kernel32

advapi32

user32

shlwapi

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 948B

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 948B

.rsrc
Size: 4KB - Virtual size: 4KB