eb386de6bbba77516c534b1033be4c93_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eb386de6bbba77516c534b1033be4c93_JaffaCakes118
Size

66KB
MD5

eb386de6bbba77516c534b1033be4c93
SHA1

b5d4e2340dfd7e7b6a3d94149cfaa22e7961c674
SHA256

38660d7834e9612003ffaa38f90673363fd5e27a268bb18d57bbcca7e10dbf8c
SHA512

4239e2a658d348f95eada5b577f2e634eb3bf672dda007c06f5cff0ecc217b5c0cc6673bc693677e861ce956775ea18c28adf9f722423daf858a231ac31ffcd3
SSDEEP

768:mH3C2BrX+mF1JmBwmLPs0es6vo/DFuB6UJvI5:cdBtfao6ug95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb386de6bbba77516c534b1033be4c93_JaffaCakes118

Files

eb386de6bbba77516c534b1033be4c93_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

4fa117ee09c9cf4162ea6840c168025d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
ShellExecuteExA

ws2_32

socket
WSACleanup
connect
recv
closesocket
gethostbyname
WSAStartup
send
htons

msvcp60

?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0_Winit@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

user32

wsprintfA

msvcrt

malloc
srand
_snprintf
printf
rand
time
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
__CxxFrameHandler
_except_handler3
strstr
vsprintf
strtok

kernel32

GetStartupInfoA
CreateMutexA
GetLastError
SetErrorMode
CreateThread
GetDriveTypeA
CreateDirectoryA
FindFirstFileA
FindNextFileA
GetModuleHandleA
GetModuleFileNameA
SetFileAttributesA
DeleteFileA
CopyFileA
ExitProcess
GetLocaleInfoA
GetVersionExA
GetTickCount
GetFileAttributesA
Sleep
GetComputerNameA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4fa117ee09c9cf4162ea6840c168025d

Headers

File Characteristics

Imports

advapi32

shell32

ws2_32

msvcp60

user32

msvcrt

kernel32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 29KB - Virtual size: 112KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 29KB - Virtual size: 112KB