eaad9454919c4068cb7384aa34ea9936_JaffaCakes118

General

Target

eaad9454919c4068cb7384aa34ea9936_JaffaCakes118
Size

2.0MB
MD5

eaad9454919c4068cb7384aa34ea9936
SHA1

e6505d75cff530c75e8dfadca5654de52fd0bea1
SHA256

5a7af1b8d5b5a4bf6f65464d9e765db80f3fb9b24bde27232269d13dfcd08db9
SHA512

11508fa9383c2e91635ae8bc09d90dd9ab64d4726b0c584ed09d48237a908c8abc8b0e8a8d0ce8a5df1d7fbae9a6a2f1f5274326e5bfe2595553165da17a4326
SSDEEP

12288:AgJg1l30cvnvFssbtFThl1VMh7RWif+vPyu:Ag6119vpVU7wiCyu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaad9454919c4068cb7384aa34ea9936_JaffaCakes118

Files

eaad9454919c4068cb7384aa34ea9936_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
WSAInstallServiceClassW
sendto
WSASendDisconnect
WSASocketW
ioctlsocket
gethostbyaddr
inet_addr

oleaut32

SysFreeString
SafeArrayRedim

kernel32

ExitThread
GetConsoleMode
GetShortPathNameW
IsBadStringPtrA
CreateIoCompletionPort
GetTempPathW
GetDiskFreeSpaceExA
CreateProcessA
GetCurrentProcessId
ExitProcess
GetThreadContext
SetupComm
OpenMutexA
SwitchToFiber
VirtualAllocEx

user32

GetTopWindow
LoadStringA
CreateIconFromResource
GetMessageA
EnumDisplayDevicesA
AppendMenuA
mouse_event
GetWindowContextHelpId
SendNotifyMessageA
PeekMessageW
CreateDialogIndirectParamA
SetCaretPos
GetIconInfo
GetTabbedTextExtentA
ExcludeUpdateRgn
SetThreadDesktop
IsDialogMessageW
GetMonitorInfoA

advapi32

AccessCheckAndAuditAlarmW
AllocateLocallyUniqueId
SetKernelObjectSecurity
EqualSid
IsValidAcl
BuildTrusteeWithSidW
SetSecurityDescriptorDacl
AddAce
ChangeServiceConfigW
StartServiceW
GetAclInformation
ObjectCloseAuditAlarmA
RegQueryValueA
SetSecurityDescriptorGroup
RegFlushKey
GetPrivateObjectSecurity
UnlockServiceDatabase

comctl32

ImageList_GetBkColor
ImageList_SetImageCount

Sections

.text
Size: 3KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

Imports

ws2_32

oleaut32

kernel32

user32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 251KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 3KB - Virtual size: 251KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB