f544773becea8530340f65107bde85a8_JaffaCakes118

General

Target

f544773becea8530340f65107bde85a8_JaffaCakes118
Size

56KB
MD5

f544773becea8530340f65107bde85a8
SHA1

3090a178a8bb4b457ac526790ac13118c8fa84be
SHA256

c591009f96d95c6534267132776ce8a1174c05468a334f6ddd9283bc5b70a8ad
SHA512

927d94c767e72a0d137bdb74d5551bc854ffe3d731615b145f25d2165a233022aa7c9543742b4bb047829ef2196b448d9470288a7d46a3ad87ef46868f19a08b
SSDEEP

768:WQ8szK0b2uaqMkzNEc8gKj9pyx5XO9H69Q6FAKa9/7sWM4imeOSDu:WQTb8gKj9m5XO9H6eKa9/7sdnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f544773becea8530340f65107bde85a8_JaffaCakes118

Files

f544773becea8530340f65107bde85a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f21ee12fd30f4d175c4be2ba85e8cd68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

bind
listen
accept
shutdown
inet_addr
WSAStartup
gethostbyname
htons
socket
connect
getsockname
closesocket
WSACleanup
htonl
recv
send

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

shell32

ShellExecuteA

kernel32

SetStdHandle
LCMapStringW
LCMapStringA
GetLocaleInfoA
InterlockedExchange
ReadFile
HeapReAlloc
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
HeapSize
FlushFileBuffers
CloseHandle
RtlUnwind
UnhandledExceptionFilter
QueryPerformanceCounter
VirtualQuery
GetModuleFileNameA
CopyFileA
lstrcatA
GetSystemDirectoryA
Sleep
CreateThread
GlobalAlloc
GlobalFree
ExitProcess
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
SetFilePointer
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f21ee12fd30f4d175c4be2ba85e8cd68

Headers

File Characteristics

Imports

ws2_32

advapi32

shell32

kernel32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 159KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 159KB