bfc8d68fca03f4752897c552b7984523_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfc8d68fca03f4752897c552b7984523_JaffaCakes118
Size

80KB
MD5

bfc8d68fca03f4752897c552b7984523
SHA1

feb5734d567b976f860d21336fcc6989c8eb51df
SHA256

c6b67f1565243e31bdc9e9972a5c428154b7bb83364073731c1d16b03da0c75a
SHA512

e99898b4e20b55ade3cea973538762779cdc296b92048bb95b36193019855f67d34ed7c8e9f5096b9680bc34548ee9861f78c54cfd692a64e705fe8b224d1250
SSDEEP

1536:jwE282JpLG9W6XVjRm+4AsrltziMTrv5hlxc:Mph/AOrRHtj5hlx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc8d68fca03f4752897c552b7984523_JaffaCakes118

Files

bfc8d68fca03f4752897c552b7984523_JaffaCakes118
.exe windows:5 windows x86 arch:x86

04921d8c1511c0c92a0710ee1241988d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
TerminateProcess
GetTickCount
GetCurrentThreadId
OutputDebugStringA
GetLastError
HeapSize
GetProcessHeap
SetEndOfFile
CreateProcessA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LoadLibraryA
CreatePipe
GetEnvironmentVariableA
GetVersionExA
GetComputerNameA
Sleep
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
CreateFileA
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
HeapAlloc
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapFree
CloseHandle
ReadFile
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
ExitProcess
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

TranslateAcceleratorA
LoadAcceleratorsA
DispatchMessageA
GetSystemMetrics
LoadIconA
LoadStringA
TranslateMessage
GetMessageA
EndDialog
PostQuitMessage
EndPaint
BeginPaint
SetTimer
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA

advapi32

RegQueryValueExA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
GetUserNameA
RegOpenKeyExA

shell32

SHGetFolderPathA

ws2_32

WSAStartup
getaddrinfo
socket
connect
closesocket
send
recv
freeaddrinfo

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

04921d8c1511c0c92a0710ee1241988d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB