da146bb4121c5a72911c1ecbb5f5db8c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

da146bb4121c5a72911c1ecbb5f5db8c_JaffaCakes118
Size

516KB
MD5

da146bb4121c5a72911c1ecbb5f5db8c
SHA1

dd9d190d8bd9010bc3f48ff41852dbee805726f0
SHA256

9811a21e2631f9d64cf51810434e5206ae290090a370d40d6576f5d56ab57e24
SHA512

cad5175ec924955d211c8bccef8ea948e42f13955bae6821e6f784a6c10272b41b63867ad295eb60f61deb5264b32428ca94f773989439558fdec583cf19dc37
SSDEEP

3072:r7vEaju2EinPn1nWkFbBafOiFQBtFWYqdQsbou6CVZe03SMtrQw:fvvWYP1nrGJS7WTR6CP3Sw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da146bb4121c5a72911c1ecbb5f5db8c_JaffaCakes118

Files

da146bb4121c5a72911c1ecbb5f5db8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fdc44308ca58e5665dafe6e9b9c1831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostname
gethostbyname
inet_ntoa
inet_addr
connect
WSACleanup
WSAStartup
socket
setsockopt
ioctlsocket
htons
bind
listen
send
select
__WSAFDIsSet
accept
recv
closesocket

kernel32

MapViewOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
ExitThread
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemDirectoryA
GetLocalTime
Sleep
MultiByteToWideChar
ReadFile
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
GetLastError
CreateThread
GetFileSize
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
CreateProcessA
ExpandEnvironmentStringsA
SetFileAttributesA
GetTempPathA
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
GetCurrentProcess
CreatePipe
GetVersionExA
GlobalMemoryStatus
ExitProcess
WideCharToMultiByte
GetComputerNameA
TerminateProcess
DeleteFileA
GetCurrentProcessId
CopyFileA
WaitForSingleObject
CreateMutexA
TerminateThread
MoveFileA
SetConsoleCtrlHandler
GetLocaleInfoA
GetLogicalDrives
WaitForMultipleObjects
GenerateConsoleCtrlEvent
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetCPInfo

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.teraphy
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8fdc44308ca58e5665dafe6e9b9c1831

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 124KB - Virtual size: 124KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 376KB - Virtual size: 376KB

.teraphy Size: 4KB - Virtual size: 4KB

.text
Size: 124KB - Virtual size: 124KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 376KB - Virtual size: 376KB

.teraphy
Size: 4KB - Virtual size: 4KB