efeeff7074d08ccb1806eff3c97ccb32_JaffaCakes118

General

Target

efeeff7074d08ccb1806eff3c97ccb32_JaffaCakes118
Size

10KB
MD5

efeeff7074d08ccb1806eff3c97ccb32
SHA1

9f019777195a9db373a826ae741dca66f4d990ca
SHA256

aa023283b86e4bb5c5c5e46ab021b36b7b8cf385befb04bca249e7017837805d
SHA512

b91a3031b253c65cb056447f06f4c54f1674c6394f0cb3788b2a57461f90fdd821a480e070b9041956889f430599981de2bb60bdf6401c6c1672415a7d7b8786
SSDEEP

192:u6WURLwtWh/TBwHUg2p0GIz066XQbGVWUVCYLVQHzP1oyn:fwmFR/IYXQ0LVQH71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efeeff7074d08ccb1806eff3c97ccb32_JaffaCakes118

Files

efeeff7074d08ccb1806eff3c97ccb32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d41b4ac0e889696f3ef2e0e4b59ddb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateMutexA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetLongPathNameA
GetSystemDirectoryA
ReadFile
CloseHandle
CreateProcessA
GetStartupInfoA
CreatePipe
GetCurrentDirectoryA
lstrlenA
GetModuleHandleA
Sleep
TerminateThread
WaitForSingleObject
CreateThread
GetSystemTime
WinExec

ws2_32

gethostname
WSAStartup
shutdown
recv
__WSAFDIsSet
select
inet_addr
htons
WSASocketA
closesocket
connect
WSACleanup
ioctlsocket
send

advapi32

RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegCloseKey

wininet

InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile

shell32

ShellExecuteExA

msvcrt

fwrite
_strnicmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncpy
_itoa
strstr
strncat
strlen
memset
atoi
strcat
strcpy
??3@YAXPAX@Z
fclose
fflush
_chdir
fopen
??2@YAPAXI@Z
atol
sscanf

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0d41b4ac0e889696f3ef2e0e4b59ddb1

Headers

File Characteristics

Imports

kernel32

ws2_32

advapi32

wininet

shell32

msvcrt

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 28KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 28KB