f9f8d1c53d312f17c6f830e7b4e6651d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f9f8d1c53d312f17c6f830e7b4e6651d_JaffaCakes118
Size

159KB
MD5

f9f8d1c53d312f17c6f830e7b4e6651d
SHA1

6b3eb6069b69fbcfa6e1e9c231ce95674d698f51
SHA256

bedfbfe249b4a2be35bbfb1cf166d2119e132ee7c608909d34238e9eba6c9749
SHA512

ceb9b35ea3876ab57a6e0213afbb6914f8e5d448189e5e3caa7ea1709153596ea90f5e7c2031bc0f6f0b45771dc7f9721c5337c8665fc3d1ed1cef4ae8ab964a
SSDEEP

3072:ICYY5GI4sq0pdF4H1ZsfI1wcCaIWdekqFEiJoFKEeB6FP7iG:WYk9F0pqRwRseIiJ8KEeB3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9f8d1c53d312f17c6f830e7b4e6651d_JaffaCakes118

Files

f9f8d1c53d312f17c6f830e7b4e6651d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

91afa2950fb9c03d392b295ce9394409

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

user32

CharUpperBuffA
MessageBoxA
WinHelpA

kernel32

CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
DosDateTimeToFileTime
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
FreeConsole
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetTimeZoneInformation
GetVersionExA
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MultiByteToWideChar
OutputDebugStringA
ReadConsoleInputA
ReadFile
SearchPathA
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTitleA
SetCurrentDirectoryA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile

wsock32

WSAStartup
WSACleanup
gethostname
inet_addr
gethostbyname
gethostbyaddr
ioctlsocket
WSAGetLastError
send
recv
accept
select
listen
ntohs
getsockname
closesocket
bind
htonl
setsockopt
connect
socket
htons

Sections

AUTO
Size: 115KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 32KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 13KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91afa2950fb9c03d392b295ce9394409

Headers

File Characteristics

Imports

advapi32

user32

kernel32

wsock32

Sections

AUTO Size: 115KB - Virtual size:

.idata Size: 3KB - Virtual size:

DGROUP Size: 32KB - Virtual size:

.bss Size: 13KB - Virtual size:

.reloc Size: 8KB - Virtual size:

AUTO
Size: 115KB - Virtual size:

.idata
Size: 3KB - Virtual size:

DGROUP
Size: 32KB - Virtual size:

.bss
Size: 13KB - Virtual size:

.reloc
Size: 8KB - Virtual size: