02bc292dc3d5f8223e6b3a01e8717352_JaffaCakes118

General

Target

02bc292dc3d5f8223e6b3a01e8717352_JaffaCakes118
Size

133KB
MD5

02bc292dc3d5f8223e6b3a01e8717352
SHA1

0c852fcd4be1e9ae6ddb2413d63fb120eb1a5cf7
SHA256

dd81474f64675620e210076f6173f17da27d3e003fde8ef2e39697a3e64aaa5a
SHA512

8cf7ad88af8c6ad7f2e6151995c443556858b58d06503d36e01761b794ca1f6c616d20cf9ba84cdba7d5a3610543274c0f01d4c5a9066e28626db1ace0403dce
SSDEEP

1536:MN+EsDFdjeqSKFO+Tf5DuPeL0qSTv8Wc1TC1QZhOV8s4ZZ7uRCxOlLNILojj/8vg:l3djedKFOSUP4lSLrhQZeDrXjjdd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02bc292dc3d5f8223e6b3a01e8717352_JaffaCakes118

Files

02bc292dc3d5f8223e6b3a01e8717352_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ff521d3b27ee5f6af7d512c1f5947372

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord4129
ord6648
ord2764
ord537
ord825
ord939
ord6283
ord4277
ord4202
ord5710
ord5683
ord1158
ord6282
ord941
ord2818
ord2614
ord1168
ord940
ord858
ord535
ord540
ord860
ord2915
ord800
ord2763

msvcrt

_except_handler3
?terminate@@YAXXZ
free
_initterm
_adjust_fdiv
malloc
exit
strncmp
printf
strncpy
atoi
strstr
strchr
__CxxFrameHandler
time
srand
sprintf
rand

kernel32

lstrlenA
TerminateThread
GetTempPathA
CloseHandle
Sleep
WinExec
CreateThread
ExitThread

user32

wsprintfA

advapi32

OpenServiceA
OpenSCManagerA
DeleteService

urlmon

URLDownloadToFileA

ws2_32

WSAStartup
recv
send
connect
inet_addr
htons
closesocket
gethostbyname
sendto
setsockopt
WSASocketA
gethostname
inet_ntoa
socket

winmm

timeGetTime

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff521d3b27ee5f6af7d512c1f5947372

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

urlmon

ws2_32

winmm

Sections

.text Size: 114KB - Virtual size: 114KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 114KB - Virtual size: 114KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 8KB - Virtual size: 7KB