bc4a8c96b67ae7f1eed21eeb28356a90_JaffaCakes118

General

Target

bc4a8c96b67ae7f1eed21eeb28356a90_JaffaCakes118
Size

11KB
MD5

bc4a8c96b67ae7f1eed21eeb28356a90
SHA1

12952ce95ca54bf703ec0285a9973914830f4c0b
SHA256

e8d7f3c158aacea330ee5dcad10d500588182e0d4fb336da2e79713d2aadd67e
SHA512

1219f7abcc6332163fd5de06f6d40ea582640f1dd2875daf5daa3c603b1df85605e1dade8d3a9d44cb999bd5629797277fde4ff1a827490fc2220b32ceb75c2d
SSDEEP

192:ZiT4N/JNw3al5umvIV7E0wzXmui1aFP1oyn68XYCV5/urZ:O0omvIREFh+ax1Q8h5/urZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc4a8c96b67ae7f1eed21eeb28356a90_JaffaCakes118

Files

bc4a8c96b67ae7f1eed21eeb28356a90_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a659362cfff1f182fb16593043728067

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
_stricmp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
vsprintf
memcpy
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
srand
rand
sprintf
strcat
strchr
strcpy
strlen

psapi

GetModuleFileNameExA

wininet

InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle

ws2_32

connect
WSAStartup
htons
WSACleanup
recv
socket
closesocket
gethostbyname
send
WSAGetLastError

shlwapi

PathFindExtensionA
PathCombineA
PathFindFileNameA
StrStrIA

pdh

PdhOpenQueryA
PdhAddCounterA
PdhCollectQueryData

kernel32

ExitProcess
GetLastError
CopyFileA
SetFileAttributesA
GetModuleFileNameA
CreateProcessA
GetLocaleInfoA
CreateMutexA
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
WriteFile
CreateFileA
Sleep
WaitForSingleObject
CloseHandle
CreateThread
GetTempPathA
GetTickCount

advapi32

RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

DoEnvironmentSubstA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a659362cfff1f182fb16593043728067

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

psapi

wininet

ws2_32

shlwapi

pdh

kernel32

advapi32

shell32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 35KB

.rsrc Size: 1024B - Virtual size: 760B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 35KB

.rsrc
Size: 1024B - Virtual size: 760B