fcdb82b953fb5d125656c1446c721f21_JaffaCakes118

General

Target

fcdb82b953fb5d125656c1446c721f21_JaffaCakes118
Size

16KB
MD5

fcdb82b953fb5d125656c1446c721f21
SHA1

a6f834a9a7dc4a44a6f6b5ebaa84225026afb8ce
SHA256

eee0a594c5490a114ef46e60efd27cdb572f9cf7438eb5e741c3ed5d66f2cad9
SHA512

155ad901d63fd2a28129b0d130afbd0218c9c5a41a891c37b7ecb7c6ffbec2303f8cb37cc10220450c1d0cf4eb91f0aed41ee8567550cacffe4281b0c68ebf37
SSDEEP

192:GeQGCKfrSU2waJ1d3OqRneXjRNMh57nWT8at88Pz37y+xCmmtoEaEH8r2u5KPdXy:GbGbOhwQQzR2hNS8YQzoXT2vBulE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcdb82b953fb5d125656c1446c721f21_JaffaCakes118

Files

fcdb82b953fb5d125656c1446c721f21_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f97f13633b002c57c49be98c2d1bc144

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetSystemTime
GetTickCount
GetTimeFormatA
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
OpenProcess
ReadFile
GetCurrentThreadId
Sleep
TerminateProcess
TerminateThread
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
CreateThread
CreateMutexA
CreateFileA
ReleaseMutex
CloseHandle

user32

wsprintfA

wsock32

gethostname
inet_addr
listen
socket
connect
closesocket
bind
__WSAFDIsSet
WSAStartup
WSACleanup
send
select
recv
gethostbyname
accept

ole32

CreateStreamOnHGlobal
CoInitialize

shlwapi

StrStrIA

wininet

InternetCrackUrlA
InternetCloseHandle
InternetOpenUrlA
InternetGetConnectedState
InternetOpenA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyA

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f97f13633b002c57c49be98c2d1bc144

Headers

File Characteristics

Imports

kernel32

user32

wsock32

ole32

shlwapi

wininet

advapi32

urlmon

shell32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 444B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 444B