b1985ebefa2159d4a5de7592cd25cce6_JaffaCakes118

General

Target

b1985ebefa2159d4a5de7592cd25cce6_JaffaCakes118
Size

84KB
MD5

b1985ebefa2159d4a5de7592cd25cce6
SHA1

348b70f1f904278ba9263393d9631c11c0c785c5
SHA256

7b20d41e00db0683cd735257cc0caf744a847a41280f912f1be0ec14859a9f2a
SHA512

cf046495268c7104af638073e3916a87f23546d7d85dbdc41a66977fd2a898c03794b76cb0e638b4303c0231c9643f68c1cf5c6cb76f1e351c3b54557068ce72
SSDEEP

1536:PhJQI9xWWOme9gi8i9hpKZp6xScChjxifOWuNIDYcq:PhJQI9xhdiXxSRjKOWuqDYcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1985ebefa2159d4a5de7592cd25cce6_JaffaCakes118

Files

b1985ebefa2159d4a5de7592cd25cce6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

173dfdbeb0d688cb4e92bcfa89f22873

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
lstrlenA
MoveFileA
CloseHandle
GetModuleHandleA
GetStartupInfoA
Sleep
LoadLibraryA
GetProcAddress
GetSystemInfo
FreeLibrary

user32

IsWindow
SendMessageA
CharNextA

advapi32

CloseServiceHandle
DeleteService

shell32

ShellExecuteA

ole32

CoCreateGuid
CoInitialize
CoUninitialize

msvcrt

_strnicmp
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_strnset
_controlfp
__set_app_type
__p__fmode
putchar
??3@YAXPAX@Z
memcpy
__CxxFrameHandler
_CxxThrowException
memmove
ceil
_ftol
puts
strlen
strstr
memset
??2@YAPAXI@Z
memcmp
free
malloc
_except_handler3
strcmp
sprintf
strcpy
strrchr
atoi
strncmp
strncpy
strcat
strchr
_errno
_beginthreadex
_snprintf
calloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
??0exception@@QAE@ABQBD@Z

ws2_32

setsockopt
htons
gethostbyname
socket
recv
WSAIoctl
closesocket
send
inet_ntoa
inet_addr
getsockname
bind
recvfrom
__WSAFDIsSet
WSACleanup
WSAStartup
select

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

173dfdbeb0d688cb4e92bcfa89f22873

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

msvcrt

ws2_32

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 2KB