bd3598b5a131595fb51bd3639333908b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bd3598b5a131595fb51bd3639333908b_JaffaCakes118
Size

167KB
MD5

bd3598b5a131595fb51bd3639333908b
SHA1

b1e3daa50333651559cc09f637b479502318e2fb
SHA256

5bf74761098e927669e345d3f7cd27130d12648263b2ef2935eb8fa335d5ae93
SHA512

cd117e75092c57452008a003f07d54782c3b0b0fa4e7c7d0f0039285c3ec2e2f789f3da4576bd66ee6b4b9ca3c74353f0c7f0a8828c2b6050e6b4615e1f01f47
SSDEEP

1536:4TIl1Tx8XmbJXclPhD/zRO8d02T9x39ndrAsu1IyDnLVoum:4hXmKPpRO8uSNndBuq0LVoum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd3598b5a131595fb51bd3639333908b_JaffaCakes118

Files

bd3598b5a131595fb51bd3639333908b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

588fbc4c76b319f27828e05142ee2658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
lstrcmpiA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
ExitProcess
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
ExitThread
ReleaseMutex
GetLocaleInfoA
SetFileAttributesA
TerminateThread
WaitForSingleObject
CreateThread
OutputDebugStringA
GetProcAddress
LoadLibraryA
DeleteFileA
CreateDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
CreateProcessA
ExpandEnvironmentStringsA
CreateMutexA
SetErrorMode
CopyFileA
GetLastError
GetVersionExA
Sleep
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetConsoleCtrlHandler
SetFilePointer
SetEnvironmentVariableA
RtlUnwind
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
InterlockedDecrement
InterlockedIncrement
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA

shell32

ShellExecuteA

ws2_32

sendto
getsockname
inet_addr
gethostbyname
recv
ioctlsocket
select
send
htons
socket
connect
WSAStartup
WSACleanup
closesocket

shlwapi

PathRemoveFileSpecA

urlmon

URLDownloadToFileA

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

588fbc4c76b319f27828e05142ee2658

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ws2_32

shlwapi

urlmon

Sections

.text Size: 144KB - Virtual size: 144KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 7KB - Virtual size: 18KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 144KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 7KB - Virtual size: 18KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 4KB