08b065d581a0edcd4be9ff63271b4469_JaffaCakes118

General

Target

08b065d581a0edcd4be9ff63271b4469_JaffaCakes118
Size

148KB
MD5

08b065d581a0edcd4be9ff63271b4469
SHA1

12b068c0d6363d88f6bc749951c416c06a9246f1
SHA256

5686b419b50a4deb6c87fd83d7ac453694a04dcb3b866a2b1352a359b7f4c017
SHA512

54d83b0fd234ed0d52cf6656b05a56c16fc9d3a77e9afa96cec13955aed200b23dee9acc11b827a35f2877aadb72a7158a71ea3c950a6c6ff2bd4dc57f2b46f3
SSDEEP

3072:RB3SnlM2tLkBOihgPJx+1VAhNoYA26Rq4z2x:TihsOih4Jx+AhqYA2eqyY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b065d581a0edcd4be9ff63271b4469_JaffaCakes118

Files

08b065d581a0edcd4be9ff63271b4469_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47e83205e5a70b281ac20703c942eb26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Visual\Studios.pdb

Imports

ws2_32

getpeername
gethostname
WSAGetLastError

kernel32

GetCurrentThreadId
GetTickCount
GetProcAddress
LoadLibraryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetCursorPos

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47e83205e5a70b281ac20703c942eb26

Headers

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

user32

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 111KB - Virtual size: 111KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 111KB - Virtual size: 111KB