f4e6727c178dde599f2884fd0a973077_JaffaCakes118

General

Target

f4e6727c178dde599f2884fd0a973077_JaffaCakes118
Size

2.0MB
MD5

f4e6727c178dde599f2884fd0a973077
SHA1

526e65607d67f566a5af303db8cd607b9c6e2267
SHA256

f1622c402782f9f6c7e8396d4ae13d388a1ec8598803da82223cdcaf20dbeda8
SHA512

35f1fbc72b9090e4ea4cf4059b7f6b91a9194fcb1e1d60f32e09f8c120e7a50a1cce94c9504189e9bb0eb8dccb58e8ecaa037c324f72017fd2750b18c43d6043
SSDEEP

24576:Ag6119vpVU7wiCyuIYTKcCLYESr9QCKkd3oCctVr+JK1mLD5+ZjePeVUUZOYvB0z:Ag6HVjyii8E4ld3oC8+hXBPYb7j18z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4e6727c178dde599f2884fd0a973077_JaffaCakes118

Files

f4e6727c178dde599f2884fd0a973077_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
WSAInstallServiceClassW
sendto
WSASendDisconnect
WSASocketW
ioctlsocket
gethostbyaddr
inet_addr

oleaut32

SysFreeString
SafeArrayRedim

kernel32

ExitThread
GetConsoleMode
GetShortPathNameW
IsBadStringPtrA
CreateIoCompletionPort
GetTempPathW
GetDiskFreeSpaceExA
CreateProcessA
GetCurrentProcessId
ExitProcess
GetThreadContext
SetupComm
OpenMutexA
SwitchToFiber
VirtualAllocEx

user32

GetTopWindow
LoadStringA
CreateIconFromResource
GetMessageA
EnumDisplayDevicesA
AppendMenuA
mouse_event
GetWindowContextHelpId
SendNotifyMessageA
PeekMessageW
CreateDialogIndirectParamA
SetCaretPos
GetIconInfo
GetTabbedTextExtentA
ExcludeUpdateRgn
SetThreadDesktop
IsDialogMessageW
GetMonitorInfoA

advapi32

AccessCheckAndAuditAlarmW
AllocateLocallyUniqueId
SetKernelObjectSecurity
EqualSid
IsValidAcl
BuildTrusteeWithSidW
SetSecurityDescriptorDacl
AddAce
ChangeServiceConfigW
StartServiceW
GetAclInformation
ObjectCloseAuditAlarmA
RegQueryValueA
SetSecurityDescriptorGroup
RegFlushKey
GetPrivateObjectSecurity
UnlockServiceDatabase

comctl32

ImageList_GetBkColor
ImageList_SetImageCount

Sections

.text
Size: 3KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19747623e6ab86cffa0fb0ad3e09e2ef

Headers

File Characteristics

Imports

ws2_32

oleaut32

kernel32

user32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 251KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 3KB - Virtual size: 251KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 17KB - Virtual size: 16KB