dc2c87d92be297b73d116216fe21b1e2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dc2c87d92be297b73d116216fe21b1e2_JaffaCakes118
Size

326KB
MD5

dc2c87d92be297b73d116216fe21b1e2
SHA1

cb8aa70054fae7cbee8a34b7c189ed744198fd60
SHA256

5910cafbde0789335ea893dc21617d35ab63340411eb55c114c2300adc50d385
SHA512

2d143a2b25fcb52fdc18b9f3fc32d156f3fe8936db5a86150aea41b87b70a4e0400e73d44e02344c4277f3c464b0b109fbd7e185d2a01807edb2ad59aa71de32
SSDEEP

6144:MYpFTPWSTc0crk3L0yrMWmMrf7vcknqwTrYaLcefFTgumbB:MYpNNTc0T3gyrMWm8bnq4YQtm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc2c87d92be297b73d116216fe21b1e2_JaffaCakes118

Files

dc2c87d92be297b73d116216fe21b1e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14ae005418e002609c443de438160611

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetObjectA
SelectObject

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateProcessA
CreateThread
DeleteFileA
ExitProcess
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetCommandLineA
GetCurrentThread
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetLastError
GetLocalTime
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemDirectoryA
GetSystemTime
GetTempFileNameA
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
ReadFile
SetFileAttributesA
SetFilePointer
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
UnmapViewOfFile
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_itoa
_onexit
_setmode
_snprintf
_strdup
atexit
atoi
difftime
fclose
fgets
fopen
fprintf
getc
getenv
gmtime
isalnum
isspace
isxdigit
localtime
malloc
memcpy
memset
mktime
perror
putc
signal
sprintf
sscanf
strcat
strcpy
strftime
strlen
strncpy
strrchr
time
tolower
toupper

user32

CharLowerA
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
GetClientRect
GetDC
GetMessageA
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ReleaseDC
SetTimer
ShowWindow
TranslateMessage
wsprintfA
wvsprintfA

ws2_32

WSAStartup
closesocket
connect
gethostbyaddr
gethostbyname
htons
inet_addr
ntohs
recv
select
send
sendto
socket

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

14ae005418e002609c443de438160611

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

user32

ws2_32

Sections

.text Size: 50KB - Virtual size: 49KB

.data Size: 1024B - Virtual size: 884B

.rdata Size: 32KB - Virtual size: 31KB

.bss Size: - Virtual size: 6KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 238KB - Virtual size: 237KB

.text
Size: 50KB - Virtual size: 49KB

.data
Size: 1024B - Virtual size: 884B

.rdata
Size: 32KB - Virtual size: 31KB

.bss
Size: - Virtual size: 6KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 238KB - Virtual size: 237KB