b605f68d68627efe977b3dcae05c2b82_JaffaCakes118

General

Target

b605f68d68627efe977b3dcae05c2b82_JaffaCakes118
Size

16KB
MD5

b605f68d68627efe977b3dcae05c2b82
SHA1

82a5d96fc45661314bb2ac016f4a171d26ccf8db
SHA256

5a984a07fc3aa2fb42de1783a31efa9ac9abd0f3ca57f6091d640eb06c63d9b6
SHA512

602f15ca02c27ba60fc4a17de71dccc1f1271d1bf614e0a7230ce0dd4d24520d2f885f338eee75c3a47ce428a37246ae661fa30a182fddbbec8993cbede65da4
SSDEEP

384:G+5UWUaxwaE463EIijPTAXkmUwuzYP9qgb9FN1iwHC:GBuxwa563EItkmUwe2MwzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b605f68d68627efe977b3dcae05c2b82_JaffaCakes118

Files

b605f68d68627efe977b3dcae05c2b82_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ac0b3d7a070884ab40b83f0fed8ffd0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrA
StrToIntA
StrDupA

ws2_32

gethostbyname
htons
socket
WSAStartup
connect
send
recv
closesocket

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA

kernel32

GetModuleHandleA
GetStartupInfoA
CreateFileMappingA
GetLastError
GetSystemDefaultLangID
VerLanguageNameA
ExitProcess
GetModuleFileNameA
lstrlenA
lstrcatA
lstrcpyA
CloseHandle
GetFileSize
CreateFileA
ReadFile
WriteFile
SetFilePointer
GetTempFileNameA
GetTickCount
GetTempPathA
CreateProcessA
Sleep
GetFileAttributesA
GetVolumeInformationA
GetEnvironmentVariableA
GetSystemInfo
GetSystemDirectoryA
ExpandEnvironmentStringsA
SetFileTime
GetFileTime
lstrcmpA

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

msvcrt

free
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
??3@YAXPAX@Z
memset
_onexit
strrchr
malloc
realloc
memmove
sprintf

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ac0b3d7a070884ab40b83f0fed8ffd0b

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

ws2_32

wininet

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 7KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 7KB