befe4a55546c48fd3589719339f1add2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

befe4a55546c48fd3589719339f1add2_JaffaCakes118
Size

108KB
MD5

befe4a55546c48fd3589719339f1add2
SHA1

4f2a11899431dbc10212358fa86af570a2f90833
SHA256

a3cd2e4d5f7302f9b5f6d802224038fd0e52139013044c531bfb614e6a2e8c87
SHA512

70236f297aa9277df09766d0aa87e87dbe00b439029c055c1fe109903b17bc6add88147bb061a067f430b04e651289b8969d4243db7234a11ef9191eb8a13c57
SSDEEP

1536:RySvEtQwOxcPz0wHNDYHQa/HAwai4HQHWFx7qzrzlayH+Jq3z/V2:tqPzZS9HA9i4HeYqzrzlayH+JqJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
befe4a55546c48fd3589719339f1add2_JaffaCakes118

Files

befe4a55546c48fd3589719339f1add2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec98731851ee28b42005886048fd4a97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
GetModuleFileNameA
Sleep
CreateThread
DeleteFileA
CloseHandle
MoveFileExA
lstrlenA
WriteFile
CreateFileA
GetTickCount
GetTempPathA
LoadLibraryA
GetWindowsDirectoryA
WinExec
SetFileAttributesA
GetLastError
ReleaseMutex
OpenMutexA
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
ExitProcess
CreateMutexA
ReadFile
lstrcmpiA
GetSystemDirectoryA
GetCurrentThreadId
CreateDirectoryA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
GetStringTypeA
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
IsBadCodePtr
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
IsBadReadPtr
SetUnhandledExceptionFilter
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
ExitThread
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
HeapFree
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
SetEndOfFile
FlushFileBuffers
HeapReAlloc
IsBadWritePtr

shell32

ShellExecuteA

ws2_32

htons
WSAStartup
send
__WSAFDIsSet
recv
WSAIoctl
socket
connect
closesocket
inet_addr
sendto
setsockopt
WSASocketA
htonl
select

wininet

InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec98731851ee28b42005886048fd4a97

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

wininet

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 18KB - Virtual size: 23KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 18KB - Virtual size: 23KB

.rsrc
Size: 10KB - Virtual size: 9KB