b89398a628a6e23e26d8376b4411d761_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b89398a628a6e23e26d8376b4411d761_JaffaCakes118
Size

46KB
MD5

b89398a628a6e23e26d8376b4411d761
SHA1

78050a03bd3a1624f1e3e7d1be7da3de9720cfba
SHA256

5878d7a9238baacf93bdde914cc7d6a25c6c1963aa48c89f502e72ae9c04c198
SHA512

ded49ca92dcb56f5b67ebee0a78c57262b44ba8460ec5e1b03b9bc49ef7d13414b9e36f53440e955b8bba65855cecbe2624c7d02d42bd5d526cf5d53a54389af
SSDEEP

768:Cnd3wu7vmbns8ijQdGvbu/w4Jg5kRlfVi3lcovnNlmgTR:Ad3Kbn4KGvbGw4JZlNWvKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b89398a628a6e23e26d8376b4411d761_JaffaCakes118

Files

b89398a628a6e23e26d8376b4411d761_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5528e44d7521f1f24bbdd8a782e39d6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
CreateThread
TerminateProcess
LoadLibraryA
GetStringTypeW
GetProcAddress
LCMapStringW
LCMapStringA
GetStringTypeA
RtlUnwind
GetFileType
WriteFile
SetHandleCount
GetOEMCP
GetStdHandle
GetCPInfo
WideCharToMultiByte
GetACP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
MultiByteToWideChar
VirtualAlloc
VirtualFree
UnhandledExceptionFilter
HeapDestroy
GetVersion
HeapCreate
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
GetSystemTime
GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
HeapReAlloc
FlushFileBuffers
SetStdHandle
ExitProcess
GetLocalTime
SetFilePointer
GetLastError
HeapFree
GetCurrentProcess
HeapAlloc

user32

PostMessageA
DispatchMessageA
PeekMessageA
TranslateMessage
GetMessageA
LoadIconA
RegisterClassA
GetSysColor
ShowWindow
LoadCursorA
UpdateWindow
IsWindowEnabled
CreateWindowExA
EnableWindow
SetDlgItemTextA
GetWindowTextA
SetWindowLongA
GetWindowTextLengthA
GetWindowLongA
SendDlgItemMessageA
EndDialog
GetClientRect
wsprintfA
PostQuitMessage
ReleaseDC
GetDC
SendMessageA
DefWindowProcA
CreateDialogParamA
DestroyWindow
DialogBoxParamA

gdi32

DeleteObject
CreateSolidBrush
GetDeviceCaps
CreateFontA
GetTextMetricsA
GetStockObject
SelectObject
GetTextExtentPoint32A

comctl32

ord17
ord6
ord16

wsock32

socket
ioctlsocket
gethostbyname
gethostbyaddr
htons
send
closesocket
WSACleanup
WSAStartup
connect

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1023B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5528e44d7521f1f24bbdd8a782e39d6b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

wsock32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 1024B - Virtual size: 1023B

.data Size: 12KB - Virtual size: 17KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 1024B - Virtual size: 1023B

.data
Size: 12KB - Virtual size: 17KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB