bd456c4159bb3bae70559a343e976dc1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bd456c4159bb3bae70559a343e976dc1_JaffaCakes118
Size

160KB
MD5

bd456c4159bb3bae70559a343e976dc1
SHA1

1ec365616f09d794198adfe278db4661a346b0a8
SHA256

5c9aff32fe714d2bf055e6b4f04d004360f1b14fa9762b67590a9cc80e2bad82
SHA512

b8e5642d97cb46a251fa078212b26f51c33ba9aef3f02fbfbc0fec444b61644f55db61530e9066732d2a7384313496473290e14a35c1bac3eac4bb3d893c18a5
SSDEEP

1536:Z+f1rbf9iRybl/9tOnP17wA+ltP8Rge5Xc8jdf2VN3VFOhQhOIcIL/vwrqNGRRYL:w9r5jd9tOniAPT5X6NlFO1IcC3vmSL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd456c4159bb3bae70559a343e976dc1_JaffaCakes118

Files

bd456c4159bb3bae70559a343e976dc1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a4a02a498550d7753c1335fed953d32e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
ExitThread
Sleep
ReadFile
PeekNamedPipe
WriteFile
CreatePipe
DisconnectNamedPipe
TerminateProcess
WaitForMultipleObjects
TerminateThread
CreateThread
GetStdHandle
FreeConsole
SetEndOfFile
CreateFileA
GetNumberOfConsoleInputEvents
PeekConsoleInputA
SetConsoleMode
ReadConsoleInputA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
GetStringTypeW
LCMapStringW
HeapSize
SetFilePointer
WriteConsoleW
HeapReAlloc
SetEnvironmentVariableA
MultiByteToWideChar
CompareStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
Beep
RtlUnwind
InterlockedExchange
GetCommandLineA
HeapSetInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FatalAppExitA
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
HeapDestroy
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
IsProcessorFeaturePresent
SetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetProcessHeap

wsock32

__WSAFDIsSet
select
listen
getsockname
recvfrom
accept
WSASetLastError
socket
setsockopt
bind
connect
htons
getservbyport
ntohs
getservbyname
ioctlsocket
gethostbyname
inet_addr
gethostbyaddr
WSAGetLastError
WSAStartup
WSACleanup
closesocket
recv
send

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4a02a498550d7753c1335fed953d32e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

Sections

.text Size: 122KB - Virtual size: 122KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 13KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 122KB - Virtual size: 122KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 13KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 5KB - Virtual size: 5KB