df01d072d7f89b814f323b8ad8f50894_JaffaCakes118

General

Target

df01d072d7f89b814f323b8ad8f50894_JaffaCakes118
Size

37KB
MD5

df01d072d7f89b814f323b8ad8f50894
SHA1

5b205a62994bf0ec689aa6ef9ff130cedc5c1862
SHA256

ccc6d9f3a3e93e7e25e7831465ff59635ca5f15f71d8679b8d0734f31de8477d
SHA512

7f4595fa9d75be94182aec7665d258373daa8cf06c2f102be0e066a3fa5c1d64067581e7804a22830bd2e5fa0bc76e548c9b8963f2e00c4a9a7085c783cb013b
SSDEEP

768:NnxfQXOany31/PtOEA5f9VTsvo/ulTClSmW7lcrlMLUU3lBb+U:xxfQX7yFH7AWvHMlSpBOMAub+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df01d072d7f89b814f323b8ad8f50894_JaffaCakes118

Files

df01d072d7f89b814f323b8ad8f50894_JaffaCakes118
.dll windows:1 windows x86 arch:x86

61f17f4062dbf12b59430477bf515034

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
ExitProcess
GetEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
CloseHandle
GetTempFileNameA
GetTempPathA
GetTickCount
LoadLibraryA
RtlUnwind
CreateFileA
Sleep
VirtualQuery
WaitForSingleObject
WriteFile
lstrlenA
CreateProcessA
CreateThread

user32

wsprintfA

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

ws2_32

ntohl
listen
inet_addr
htons
htonl
socket
gethostbyname
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
send
select
recv

crtdll

_fdopen
_iob
_itoa
_open_osfhandle
_strnicmp
fclose
fputc
_cexit
localeconv
malloc
memcpy
memmove
memset
pow
raise
setbuf
strcat
strchr
strncmp
strncpy
strtol
wcslen
wctomb

Exports

Exports

_DllMain@12

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 588B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1008B - Virtual size: 1008B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 76B - Virtual size: 76B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61f17f4062dbf12b59430477bf515034

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

crtdll

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 27KB

.bss Size: - Virtual size: 588B

.data Size: 3KB - Virtual size: 3KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 1008B - Virtual size: 1008B

.edata Size: 76B - Virtual size: 76B

.text
Size: 27KB - Virtual size: 27KB

.bss
Size: - Virtual size: 588B

.data
Size: 3KB - Virtual size: 3KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1008B - Virtual size: 1008B

.edata
Size: 76B - Virtual size: 76B