d5b847a263a9ba731f33f0703f4c3301_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d5b847a263a9ba731f33f0703f4c3301_JaffaCakes118
Size

84KB
MD5

d5b847a263a9ba731f33f0703f4c3301
SHA1

dfaa7ee89932f88284caee8313c8211768f570ec
SHA256

2c3525611d6ed98700b4b31d5137b0f1207bc1c8e010fb4c1c2964c70ffb994b
SHA512

89ee7c0f643fbbcfa8c758913f2642269d5a5eab8e9a71cadc3c02e5db1899cfcbc18e7163fac089b39737d2dc8cae2f3371dd4e06a8d2701d5a37cbf74eb00a
SSDEEP

1536:3I0pJX/UHWUgVdSImooaZ+cm9t86kNWeK1Bgkoo:3rJXs2l9oaZ+cmL86kNwgkoo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b847a263a9ba731f33f0703f4c3301_JaffaCakes118

Files

d5b847a263a9ba731f33f0703f4c3301_JaffaCakes118
.exe windows:4 windows x86 arch:x86

717a301c0b2c4f98de11c5120e587ac7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetModuleFileNameA
Sleep
GetVersionExA
GetComputerNameA
DeleteFileA
TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
SetFileAttributesA
CreateFileA
SetStdHandle
SetConsoleCtrlHandler
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeA
FindFirstFileA
HeapFree
HeapReAlloc
HeapAlloc
ReadFile
GetFileType
SetHandleCount
FlushFileBuffers
GetCurrentProcess
SetFilePointer
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
SetEndOfFile
WriteFile
GetStdHandle
GetLastError
MoveFileA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak

user32

TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
TranslateMessage
LoadCursorA
LoadIconA
SetTimer
UpdateWindow
ShowWindow
RegisterClassExA
wsprintfA
GetAsyncKeyState
GetForegroundWindow
GetWindowTextA
DispatchMessageA
OpenClipboard
GetClipboardData
CloseClipboard
DefWindowProcA
CreateWindowExA

advapi32

GetUserNameA

shell32

ShellExecuteA

wininet

InternetGetConnectedState

wsock32

WSACleanup
gethostbyname
WSAStartup
send
recv
connect
htons
closesocket
socket
ioctlsocket

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

717a301c0b2c4f98de11c5120e587ac7

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

wsock32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB