ff8c29e3d9701caac9d6b85b9ce72830_JaffaCakes118

General

Target

ff8c29e3d9701caac9d6b85b9ce72830_JaffaCakes118
Size

11KB
MD5

ff8c29e3d9701caac9d6b85b9ce72830
SHA1

30775dab0b75711813f39027def23ca0f1955b30
SHA256

5b0b84573c93ee6bb1e6f4006e94f66ca894d16cb2b22e24e41a695f9a434855
SHA512

3f9495e2e1a305a570d0c00cd160af193857b187fc3c249fb37b0938fb6fea50db8eec698ff6bbf8433d348e36916b6c2d66298254fb0d97c54e9ac4f1de7f89
SSDEEP

192:TUZV03nN08TyUYiCpJiBtVX7t0Ocerk7s+4J1oynVRU5i2:AsjTDCp0tVVCF4J1zRU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff8c29e3d9701caac9d6b85b9ce72830_JaffaCakes118

Files

ff8c29e3d9701caac9d6b85b9ce72830_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9199d378016fa9df9090232cee432ed8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
memcmp
strcmp
strtok
toupper
_ftol
ceil
??2@YAPAXI@Z
atoi
memset
__CxxFrameHandler
_EH_prolog
_snprintf
strncpy
_vsnprintf
strstr
strncat
rand
srand

kernel32

GetStartupInfoA
SetErrorMode
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
CopyFileA
SetFileAttributesA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetModuleFileNameA
GetShortPathNameA
MoveFileExA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetTempPathA
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExA
ExitProcess
CreateThread
WinExec
lstrcmpA
GetLocaleInfoA
GetLastError
Sleep
GetTickCount
lstrlenA
GetComputerNameA

user32

FindWindowA

ws2_32

gethostbyname
getsockname
inet_ntoa
WSAStartup
inet_addr
WSACleanup
closesocket
send
htons
socket
connect
select
__WSAFDIsSet
recv
setsockopt

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

advapi32

StartServiceCtrlDispatcherA
DeleteService
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
ChangeServiceConfig2A
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus

Sections

.bss
Size: - Virtual size: 528B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9199d378016fa9df9090232cee432ed8

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

ws2_32

urlmon

shell32

advapi32

Sections

.bss Size: - Virtual size: 528B

.data Size: 10KB - Virtual size: 10KB

.bss
Size: - Virtual size: 528B

.data
Size: 10KB - Virtual size: 10KB