fef37c9930b9ea44fdc9cb4948fd2189_JaffaCakes118

General

Target

fef37c9930b9ea44fdc9cb4948fd2189_JaffaCakes118
Size

137KB
MD5

fef37c9930b9ea44fdc9cb4948fd2189
SHA1

327872c479061652009ea769c9c477e10d1adaf8
SHA256

8a0ada99d561f7cf2595eb7fbf17ce51092e6ec76d808da3f9d900f6a50a17f4
SHA512

974eccad246ac7b2faf19b5ad1942f56d4b4952bc586b5371af4aaf4f98a984cb44b55be3aea03e3e2115e7af6e9ac8554532642a50db873339238313864a1a6
SSDEEP

3072:ghDbu8ubBiPImBLU8nf3kk/039FrmNX5OxH3:S3dBLhnfOFrmNX5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef37c9930b9ea44fdc9cb4948fd2189_JaffaCakes118

Files

fef37c9930b9ea44fdc9cb4948fd2189_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90ce5bffe51e38803289135a7e25ccf1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostname
closesocket
send
WSAGetLastError

kernel32

GetEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetTickCount
HeapSize
LCMapStringW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA

user32

GetCursorPos

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90ce5bffe51e38803289135a7e25ccf1

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 96KB - Virtual size: 96KB