f9aacc25812f1eab335138c294a993e3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f9aacc25812f1eab335138c294a993e3_JaffaCakes118
Size

76KB
MD5

f9aacc25812f1eab335138c294a993e3
SHA1

51823695ea67912c1a63d9263f9951089098bef3
SHA256

4dd5bf2abf7200a302d8e4b7ffa15960475deeaf619e129dfb33e3dd7330725b
SHA512

dab68a6246e1a955e264ab9e873051bab03e39bb6b718bb68705b1d0dbe17e3932ab25e66fe1fb010d25b3f2d41a476e30f1e3a62d7903f41879ee30e7b8c9c5
SSDEEP

1536:ea7A5GViNZJbmVMeI4rs6sXhDT/3VTqwCpNI5:eLdzxOM4pSh2nI5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9aacc25812f1eab335138c294a993e3_JaffaCakes118

Files

f9aacc25812f1eab335138c294a993e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

008463fdfb65a0115f05b3916e664463

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
socket
gethostbyname
htons
connect
send
recv
closesocket

wininet

InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetCloseHandle

kernel32

HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
FlushFileBuffers
SetStdHandle
SetEndOfFile
GetFileAttributesA
lstrcpyA
lstrcatA
GetEnvironmentVariableA
FindNextFileA
FindFirstFileA
WideCharToMultiByte
MoveFileExA
GetModuleFileNameA
GetProcessHeap
lstrlenA
InterlockedIncrement
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
MultiByteToWideChar
LCMapStringW
CloseHandle
SetHandleCount
GetFileType
SetFilePointer
RtlUnwind
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA

shell32

SHGetFolderPathA

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

008463fdfb65a0115f05b3916e664463

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wininet

kernel32

advapi32

shell32

Sections

.text Size: 60KB - Virtual size: 60KB

.bss Size: - Virtual size: 59KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 4KB

.xdata Size: 1KB - Virtual size: 1KB

.text
Size: 60KB - Virtual size: 60KB

.bss
Size: - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 4KB

.xdata
Size: 1KB - Virtual size: 1KB