ff26569e7b14654360b262fa7fac26f7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ff26569e7b14654360b262fa7fac26f7_JaffaCakes118
Size

76KB
MD5

ff26569e7b14654360b262fa7fac26f7
SHA1

c6ab45bb140cd9315ab5ec645ca3aa34aed50509
SHA256

444f88c524c8d895fb7d5024702525ce49815c81094f732e8074eb0645ed1678
SHA512

4273cbf945582a93820005224398d9e6d6764c04125c596a2b836ce975abe7f10cfa02bd354ddfe6214671d3fbab46f6dfc5f60c371030b959deadb845e606ca
SSDEEP

768:nBcagipJIPGoepvq/xQRyObTkZanupVWJLcvRq6xMGu/kl1JdyrV3oNd2uAZp:nBcg7YesZKTkZotL6gZGL7JA3oX2uAf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff26569e7b14654360b262fa7fac26f7_JaffaCakes118

Files

ff26569e7b14654360b262fa7fac26f7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8b99edd995c6ff9fd0bbaff4e348e5e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RemoveDirectoryA
CreateDirectoryA
SearchPathA
SetCurrentDirectoryA
WriteFile
ReadFile
MoveFileA
GetFileSize
CloseHandle
CreateFileA
GetDriveTypeA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
GetComputerNameA
GetSystemDirectoryA
CreateProcessA
SetFilePointer
FindClose
GetLastError
FindNextFileA
FindFirstFileA
TerminateProcess
OpenProcess
GetCurrentProcess
Process32First
CreateToolhelp32Snapshot
FileTimeToSystemTime
GetCurrentDirectoryA
GetLogicalDriveStringsA
Process32Next
DeleteFileA
Sleep
GetVersionExA
GetSystemInfo
ExitProcess
WideCharToMultiByte
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
RtlUnwind
GetCommandLineA
GetVersion
CreateThread
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
HeapFree
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
LoadLibraryA
GetStringTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
GetExitCodeProcess
WaitForSingleObject
MultiByteToWideChar
GetStringTypeA
InterlockedDecrement
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
GetUserNameA

ws2_32

socket
gethostname
WSAStartup
gethostbyname
inet_ntoa
inet_addr
WSASocketA
WSACleanup
htons
connect
closesocket
send
select
recv

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b99edd995c6ff9fd0bbaff4e348e5e6

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB