ad883199cab7023ce0704c967c34f908_JaffaCakes118

General

Target

ad883199cab7023ce0704c967c34f908_JaffaCakes118
Size

85KB
MD5

ad883199cab7023ce0704c967c34f908
SHA1

663f9da92ba23468666d064909171345a33ccc45
SHA256

08fb079e8a872b2b6823da306599e2623d8b968081e020a88a99618523e64e37
SHA512

c4b3f8e9df5f699c53aa6d3d4314ff8fe32ad6151b0a060fbed8c529fb08076efd0490989438cf34526bafcb7006139f8a3f59887f315630ddfe75498b0f8a09
SSDEEP

1536:Z72mR4nWH5dzsisJlFz0JSGiYmnahGqJEk/jqMkK5wTZn8wJS:Z0WHqlTjaoqJT/WO0Znls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad883199cab7023ce0704c967c34f908_JaffaCakes118

Files

ad883199cab7023ce0704c967c34f908_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dd2e58a9d42421536e3f62279311919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\I\I.pdb

Imports

ws2_32

WSAGetLastError
htons
socket
connect

comctl32

ord14

kernel32

GetStringTypeW
GetStringTypeA
GetLocaleInfoA
VirtualProtect
GetStdHandle
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetSystemTime
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetSystemInfo
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dd2e58a9d42421536e3f62279311919

Headers

File Characteristics

PDB Paths

Imports

ws2_32

comctl32

kernel32

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 4KB

.rsrc Size: 89KB - Virtual size: 88KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 89KB - Virtual size: 88KB