fd880bec9f1ab3ed3ad5f73b13185104_JaffaCakes118

General

Target

fd880bec9f1ab3ed3ad5f73b13185104_JaffaCakes118
Size

10KB
MD5

fd880bec9f1ab3ed3ad5f73b13185104
SHA1

1891d98724b04157bb95e873b272502d69ded460
SHA256

59e5cff9dd25cebbc0d10ea2851ba273b9ac61c6ef2cd1b3ea1227812bed2dde
SHA512

fac5f80aa101b933bf703304b5f666238de1352db810ecf8da5bad38dd9359b5b32b364d535c1bfa0dd25cfd789ad15c1bfc30bb3949452704e9e40f2ad65293
SSDEEP

192:u6WjTfn3zteAtjJpHJg2pzGIz0yb6B+QDI2UVCYLVQHzP1oynef:Y5nd9iIcB+QiLVQH71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd880bec9f1ab3ed3ad5f73b13185104_JaffaCakes118

Files

fd880bec9f1ab3ed3ad5f73b13185104_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d41b4ac0e889696f3ef2e0e4b59ddb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateMutexA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
GetLongPathNameA
GetSystemDirectoryA
ReadFile
CloseHandle
CreateProcessA
GetStartupInfoA
CreatePipe
GetCurrentDirectoryA
lstrlenA
GetModuleHandleA
Sleep
TerminateThread
WaitForSingleObject
CreateThread
GetSystemTime
WinExec

ws2_32

gethostname
WSAStartup
shutdown
recv
__WSAFDIsSet
select
inet_addr
htons
WSASocketA
closesocket
connect
WSACleanup
ioctlsocket
send

advapi32

RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegCloseKey

wininet

InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile

shell32

ShellExecuteExA

msvcrt

fwrite
_strnicmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncpy
_itoa
strstr
strncat
strlen
memset
atoi
strcat
strcpy
??3@YAXPAX@Z
fclose
fflush
_chdir
fopen
??2@YAPAXI@Z
atol
sscanf

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0d41b4ac0e889696f3ef2e0e4b59ddb1

Headers

File Characteristics

Imports

kernel32

ws2_32

advapi32

wininet

shell32

msvcrt

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 28KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 28KB