e7d098969a845f3b7f7674a4dc328abb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e7d098969a845f3b7f7674a4dc328abb_JaffaCakes118
Size

608KB
MD5

e7d098969a845f3b7f7674a4dc328abb
SHA1

8d3251cad5bd69fdb1a4f17ee2f52d9056caa3ae
SHA256

ddecacbbb1f58ccee7d1590fe0bf717c847fb75bd8ddf606927cfb2ea418dcd4
SHA512

c584a95522f0f82cffe09a4168a9482fbccf54e08647726088abaea23bb8e66d2fed37c32e2f347e2421ba6dcfcf25ef24dc605e73ca8d89fb938b174b68f577
SSDEEP

3072:WLp9b94eorwmOgroAjVd1nut+uV2mTVDjFwkWl176jZ1hCagdQvPW5x3pLVtZM:g9b9SOgRVdRQ/vqkg1gEagdQH8LVta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7d098969a845f3b7f7674a4dc328abb_JaffaCakes118

Files

e7d098969a845f3b7f7674a4dc328abb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8740bde339723d73ad60369c868b5940

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_Add
ImageList_Create
InitCommonControlsEx

comdlg32

GetSaveFileNameA

ws2_32

send
socket
htons
setsockopt
connect
WSAStartup
WSAGetLastError
gethostname
gethostbyname
inet_ntoa
recv
WSACleanup
closesocket

kernel32

Sleep
InterlockedCompareExchange
GetModuleFileNameA
FindClose
FindFirstFileA
GetDriveTypeA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleHandleA
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA

user32

RegisterClassExA
LoadCursorA
LoadIconA
SendMessageA
EnableWindow
CreateWindowExA
GetWindowRect
DestroyWindow
SetWindowPos
GetCursorPos
ReleaseDC
GetDC
LoadBitmapA
CreatePopupMenu
AppendMenuA
TrackPopupMenu
LoadImageA
SetWindowRgn
CreateDialogParamA
SetCursor
BeginPaint
EndPaint
SetCapture
GetClientRect
ReleaseCapture
CallWindowProcA
SetWindowLongA
MessageBoxA
GetDlgItem
SetFocus
DefWindowProcA
PostQuitMessage
GetMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
LoadStringW
ShowWindow
GetDesktopWindow
SetRect

gdi32

GetStockObject
CreateDIBSection
GetPixel
ExtCreateRegion
CombineRgn
DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt

shell32

ShellExecuteA

msvcp90

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

msvcr90

_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_invoke_watson
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_beginthread
fwrite
fflush
_flushall
_endthread
__CxxFrameHandler3
isdigit
feof
fgets
strncmp
atoi
fprintf
fopen
_controlfp_s
_itoa
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_stricmp
strstr
_splitpath
??3@YAXPAX@Z
sprintf
??2@YAPAXI@Z
atol
memset
fclose
strerror
_errno
isspace
_difftime64
_time64
memcpy
_wtoi
_wcslwr

Exports

Exports

Run

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8740bde339723d73ad60369c868b5940

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

comdlg32

ws2_32

kernel32

user32

gdi32

shell32

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 568KB - Virtual size: 568KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 568KB - Virtual size: 568KB