dcc32ae4646bdd02772088471463d1b1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dcc32ae4646bdd02772088471463d1b1_JaffaCakes118
Size

76KB
MD5

dcc32ae4646bdd02772088471463d1b1
SHA1

5ae2e320de049ad72070c86d047301eefa4057a0
SHA256

902253b0112aad1b588e64be0e10e1f964f0e10b646e320bc79f97310db493f8
SHA512

9a3ff15cdae6e3741800021874ee4a2d3c09a17a4044b8b9297317b1e8bac3819e8531114b7319ad6db8148baa0262ffbe87ffe79a645e0a0a57fef176db7d63
SSDEEP

768:F62Q4I8oPbrdTRL68tB9OJJl+2n9HWt8f9ntXtRtyHdpSeG3H4UJQ9Wwcs3:Sfdzt7SA294WtRtyHXO3H4UY93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcc32ae4646bdd02772088471463d1b1_JaffaCakes118

Files

dcc32ae4646bdd02772088471463d1b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa3b8cc977a473cb559b6e500d88c693

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
WinExec
GetProcAddress
LoadLibraryA
GetTempPathA
EndUpdateResourceA
lstrlenA
UpdateResourceA
BeginUpdateResourceA
GlobalFree
ReadFile
GlobalAlloc
CloseHandle
GetFileSize
CreateFileA
GetFileAttributesA
lstrcatA
lstrcpyA
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
EnumResourceNamesA
WaitForSingleObject
ExitProcess
GetLastError
CreateMutexA
GetTickCount
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
VirtualAlloc
HeapFree
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
ExitThread
TerminateProcess
CreateProcessA
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapReAlloc

shell32

ShellExecuteA

ws2_32

WSAStartup
send
select
__WSAFDIsSet
recv
setsockopt
WSAIoctl
htons
socket
connect
closesocket
gethostbyname
inet_addr
sendto
WSASocketA
htonl

wininet

InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA

rpcrt4

UuidCreateSequential

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa3b8cc977a473cb559b6e500d88c693

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

wininet

rpcrt4

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 16KB - Virtual size: 13KB