cef1b4e3cf10d0cc08e9ae2ce9a8230d_JaffaCakes118

General

Target

cef1b4e3cf10d0cc08e9ae2ce9a8230d_JaffaCakes118
Size

16KB
MD5

cef1b4e3cf10d0cc08e9ae2ce9a8230d
SHA1

c5eb871007e28fcf376e27bf40ecf1031398234b
SHA256

ad6a02ad83602392ba61386fd9bc489860a2036041b9e5dbe70df503b07c7ffe
SHA512

bff66f69bacfb51594f8b8c7b1dd0486d5be02476114e36e2045ad3cae775f895667e3bec3bccd2cfdf6105cf8e45f84dc48d34b12cc65c821bf9d022931ca26
SSDEEP

192:99Maq7GAu5T5/AZNO8M3bZokITivLBHkx9oXuBBQ6PRQkgq82WrmqJ34oF1f1:8atz5YfFb61kYuBBQARQkdgr3Jou1f1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef1b4e3cf10d0cc08e9ae2ce9a8230d_JaffaCakes118

Files

cef1b4e3cf10d0cc08e9ae2ce9a8230d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c14f93a7726e883375f21d54415029fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

gethostname
closesocket

ntdll

memcpy
memcmp
strlen
_strupr
strstr
RtlZeroMemory

kernel32

lstrcatA
TerminateThread
Sleep
LeaveCriticalSection
InitializeCriticalSection
GetSystemDirectoryA
GetPrivateProfileIntA
GetCurrentProcessId
EnterCriticalSection
DeleteCriticalSection
lstrcmpA
lstrcpyA
lstrcmpiA
WritePrivateProfileStringA
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
VirtualProtectEx
CreateThread
lstrlenA
WaitForSingleObject

user32

wsprintfA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
KillTimer
SetTimer

Exports

Exports

ServiceRouteExA
StartServiceEx
StopServiceEx

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c14f93a7726e883375f21d54415029fa

Headers

File Characteristics

Imports

ws2_32

ntdll

kernel32

user32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 4B

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 572B

.text
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 4B

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 572B