0a3e39c84a730f8f3bbed372be4677ab_JaffaCakes118

General

Target

0a3e39c84a730f8f3bbed372be4677ab_JaffaCakes118
Size

252KB
MD5

0a3e39c84a730f8f3bbed372be4677ab
SHA1

bd8fbf13bcd73cdf0e25c729a4b101738f09e077
SHA256

0999314e7b8ca77976d65551b65e52f6d132442bfd720bfb8b29702664a011ef
SHA512

d1357cf9f120560c325ba681831d9b64140638e6f1571dab910f321fabd5a2486e98afb4394434055098c8c2f0fd45683ff97321a1d30746edb4d098fd928810
SSDEEP

6144:c8tBDF18Vvq4TAcwMMjrLagr2/+dqC3qwndnBFXTytJm+q:cndTxKrhYC3qyLDytbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a3e39c84a730f8f3bbed372be4677ab_JaffaCakes118

Files

0a3e39c84a730f8f3bbed372be4677ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ddf542beee6e55a74f7bccf5a28fb04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetCommandLineW
WaitForSingleObject
GetVersion
GetProcessHeap
HeapFree
HeapAlloc
GetStdHandle
Sleep
LoadLibraryA
GetCurrentThread

user32

CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DrawMenuBar
RemoveMenu
CheckMenuRadioItem
PostQuitMessage
TranslateMessage
DispatchMessageW
ExitWindowsEx

advapi32

RegCloseKey
QueryServiceStatus
OpenThreadToken
OpenServiceA
RegCreateKeyExW
RegDeleteKeyA
CloseServiceHandle
OpenSCManagerA
RegOpenKeyExW
RegOpenKeyA

ws2_32

WSAStartup
WSACleanup
gethostbyname
gethostname
getpeername
getprotobyname
sendto
setsockopt
shutdown
htons
getsockname
socket

msvcrt

_XcptFilter
_exit
strchr
strcmp
strcat
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_controlfp
_except_handler3
__set_app_type
__p__fmode
exit

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ddf542beee6e55a74f7bccf5a28fb04

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

msvcrt

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 57KB - Virtual size: 281KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 57KB - Virtual size: 281KB

.reloc
Size: 5KB - Virtual size: 4KB