cfa96cb2b198e28b090d49b16d61796d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

cfa96cb2b198e28b090d49b16d61796d_JaffaCakes118
Size

64KB
MD5

cfa96cb2b198e28b090d49b16d61796d
SHA1

f75d913e6e94b9daeca4d5b59b2aa1d69a38d536
SHA256

039494afd4d0e33124237ea098717abff78c2d0c2773ddc90f44566fa2e09c04
SHA512

d1d807b911d5f7a6088f47248c869c624007893d5210eb4ad0886d44688b7ff91a772b448b1ab09eb70d4423b2eac2c9ee4c367c57726af92fb69586bacae9b7
SSDEEP

768:/jkzTUV9uK6TrW89eKXtNsQjXPTTmWX1pv0d3B8PV50ShvRdsAVt:WUV9SvgAjXfmWXTv0d3Y5BHsAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfa96cb2b198e28b090d49b16d61796d_JaffaCakes118

Files

cfa96cb2b198e28b090d49b16d61796d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed8c8208fb9d6728d283a67bf9a37c58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalMemoryStatus
GetCurrentProcess
CreateProcessA
DeleteFileA
GetTempPathA
ExitProcess
TerminateProcess
WinExec
FindClose
GetComputerNameA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetLastError
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
LCMapStringW
lstrlenA
CreateThread
WriteFile
CloseHandle
GetVersionExA
lstrcpyA
LoadLibraryA
GetProcAddress
GetTickCount
FreeLibrary
Sleep
ExitThread
FindFirstFileA
LCMapStringA
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
SetEnvironmentVariableA

user32

ExitWindowsEx
wsprintfA

advapi32

CloseServiceHandle
CreateServiceA
StartServiceA
RegOpenKeyA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
DeleteService
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ws2_32

connect
closesocket
socket
htons
send
setsockopt
sendto
WSAStartup
WSACleanup
inet_addr
gethostbyname
inet_ntoa
htonl
recv
WSAGetLastError
WSASocketA

wininet

DeleteUrlCacheEntry

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed8c8208fb9d6728d283a67bf9a37c58

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

wininet

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 16B