de85d1045191762f7453c0b5fff8c751_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

de85d1045191762f7453c0b5fff8c751_JaffaCakes118
Size

136KB
MD5

de85d1045191762f7453c0b5fff8c751
SHA1

0ac2e2179577789d82f82fb3e0f36f542ff682f4
SHA256

bcab7b4d4064f8787f139379eb0e9aeb4e6c35f9464c6c771300f8af24077885
SHA512

fdda5a710aa808b9c677fe8b482e739981d7814ec9ff6c72c2df06625ece196e05d2a4ea7b5168b7eef09ed4fb3331f9bcf31a34ff7d52b12a889d235dc34e33
SSDEEP

1536:ve/VUv8X2k85hAuk+G9+2FMKQ+Yamdb/MbYL8RJsao+WZy5KwNS56qD6T:P8X25JvIaHbkJsao+WZyMwxIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de85d1045191762f7453c0b5fff8c751_JaffaCakes118

Files

de85d1045191762f7453c0b5fff8c751_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e884fc6df997641077b494802385a23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
connect
WSACleanup
WSAStartup
socket
setsockopt
ioctlsocket
htons
bind
listen
send
select
__WSAFDIsSet
accept
recv
closesocket

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

SetFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
ExitThread
Sleep
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
GetLastError
CreateThread
CloseHandle
GetFileSize
CreateFileA
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
ReadFile
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WriteFile
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualQueryEx
ReadProcessMemory
GetSystemInfo
OpenProcess
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileTime
CreateProcessA
ExpandEnvironmentStringsA
SetFileAttributesA
GetTempPathA
GetVersionExA
CopyFileA
MultiByteToWideChar
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
GetCurrentProcess
CreatePipe
GlobalMemoryStatus
GetSystemDirectoryA
GetLocalTime
ExitProcess
DeleteFileA
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
TerminateThread
MoveFileA
TerminateProcess
GetLocaleInfoA
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WideCharToMultiByte
LCMapStringA
LCMapStringW

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 905KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AZPR0001
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e884fc6df997641077b494802385a23

Headers

File Characteristics

Imports

ws2_32

version

kernel32

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 34KB - Virtual size: 905KB

AZPR0001 Size: 2KB - Virtual size: 2KB

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 34KB - Virtual size: 905KB

AZPR0001
Size: 2KB - Virtual size: 2KB