b44a09af6120b16f2cbd898d8faf28e0_JaffaCakes118

General

Target

b44a09af6120b16f2cbd898d8faf28e0_JaffaCakes118
Size

38KB
MD5

b44a09af6120b16f2cbd898d8faf28e0
SHA1

fe349360597d912279d806ea4223b264660ce6e4
SHA256

8257c91f3920f9875e169fff6795434dc8ee509c00bf09f0dfff9e4742aacf56
SHA512

596b0aa219d4a84b69acae90f842eb265b857ac9438f9d8171239559f3baefaa51ec4099a1753d66c993976992b77cf25af50ce4d18e24476fbf168bb36ed86a
SSDEEP

768:0UzR6b5lAko+AzcMvdQQhMdOxtXke+ZBEdm+6JXFE:jN6FqNcMvdzM4xwZydtW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44a09af6120b16f2cbd898d8faf28e0_JaffaCakes118

Files

b44a09af6120b16f2cbd898d8faf28e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

658231f6eaa2be6d9654832ced3895b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
ExitProcess
SetUnhandledExceptionFilter
AllocConsole
GlobalAlloc
GlobalAddAtomW
CreateFileW
EnumDateFormatsExW
DeleteTimerQueue
CloseHandle
BeginUpdateResourceW
GetUserDefaultLCID
Sleep
VirtualAlloc
CreateMutexW
GetCurrentProcessId
AddAtomW
GetConsoleCP
GetConsoleNlsMode
CreateMemoryResourceNotification
TerminateProcess
OpenEventW
WideCharToMultiByte
GetSystemTimeAsFileTime
OpenConsoleW
GetCurrentProcess
DeactivateActCtx
FatalExit
InterlockedExchange
GetModuleHandleW

msvcrt

_cabs
_chdir
_c_exit
_cgetws
_chgsign
_access
_close
_atoldbl
_cgets
_atoi64
_assert

ws2_32

closesocket
WSALookupServiceNextA
bind
connect
listen
send
socket
WSAStartup
WSACleanup

Sections

.data
Size: - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

658231f6eaa2be6d9654832ced3895b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.data Size: - Virtual size: 522KB

.bss Size: 512B - Virtual size: 256B

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 576B

.rsrc Size: 3KB - Virtual size: 3KB

.data
Size: - Virtual size: 522KB

.bss
Size: 512B - Virtual size: 256B

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 3KB - Virtual size: 3KB