c07a4a29b484aa8e9796c31341343aa2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c07a4a29b484aa8e9796c31341343aa2_JaffaCakes118
Size

34KB
MD5

c07a4a29b484aa8e9796c31341343aa2
SHA1

14f6fe6ffdf0645b5dac73f8aab0e1f820271dec
SHA256

9496905b33fbe997125795f10c41413bc7865d25bda644c8ae8dab71f4429d15
SHA512

59ac0befceeae0330ad35a8d4b7d941ea1f5eaadf97113f5308219b3b93138fdf127d2960c5ddbfc5db5b3eb157933d3cabba80997c8764a41561d13118cc416
SSDEEP

384:oKPxOg0L+AofRHabLwVBqfwhk7WPxZ1pwVtMV2FSxfEMKZKQrh2NSHLxSWjYE0WZ:hPINofRHabcVBH4a1pTYSxkK6hAQVS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c07a4a29b484aa8e9796c31341343aa2_JaffaCakes118

Files

c07a4a29b484aa8e9796c31341343aa2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8140f9a7587f928228c9ade70cb1ed66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSASocketA
setsockopt
htonl
sendto
inet_addr
gethostbyname
recv
WSACleanup
WSAGetLastError
closesocket
WSAStartup
socket
htons
connect
send
WSAAsyncSelect

kernel32

GetModuleHandleA
DeviceIoControl
GlobalFree
FreeLibrary
GetStartupInfoA
GetProcAddress
LoadLibraryA
GetTickCount
SetFileAttributesA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
LoadLibraryExA
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetSystemDirectoryA
CloseHandle
ExitProcess
CopyFileA
Sleep
DeleteFileA
GetLastError
WriteFile
CreateFileA
CreateThread
MoveFileExA
GlobalMemoryStatus
GetVersionExA
GetComputerNameA
GetCurrentProcessId
HeapAlloc
GetProcessHeap
GlobalAlloc
SetPriorityClass

user32

wsprintfA
DefWindowProcA
ExitWindowsEx
PostQuitMessage
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

ControlService
DeleteService
OpenSCManagerA
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
CreateServiceA
OpenServiceA
CloseServiceHandle
StartServiceA

msvcrt

exit
_XcptFilter
_exit
_onexit
_acmdln
__set_app_type
_controlfp
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__fmode
_strlwr
_itoa
puts
__p__commode
rand
strncpy
??2@YAPAXI@Z
_stricmp
atoi
strcspn
strstr
__CxxFrameHandler
printf
sprintf
malloc
__dllonexit
_except_handler3

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8140f9a7587f928228c9ade70cb1ed66

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

advapi32

msvcrt

msvcp60

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 12KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 12KB