0fcb1e06c7ba04843b8002ea791bd8d9_JaffaCakes118

General

Target

0fcb1e06c7ba04843b8002ea791bd8d9_JaffaCakes118
Size

22KB
MD5

0fcb1e06c7ba04843b8002ea791bd8d9
SHA1

4cb1178eba2a80d52d7b2497d460941c80ee8d02
SHA256

06d66778326455f0f1ebf995e59e61e4b1b18cbcdeee9fce3c4f42a1917862bf
SHA512

d12f22687e38a10d8d862b84f30a2a6fb76f58f0418c8ebc4d4f0b5cc7a4e3c134d47abb55527e5404a3ce24b4f2da759e3d13c92e7625e0c20a13ad5155668e
SSDEEP

384:LcAWnzCggIy5XmkcCCXSIREPyBPBUDF3lc7anKIxtj2hfl/3NhwH21E7agfmunc:Lchnhglh7CXSIREP3sUjyvNQgEnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fcb1e06c7ba04843b8002ea791bd8d9_JaffaCakes118

Files

0fcb1e06c7ba04843b8002ea791bd8d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5396e843bb3296edc1071919f66c4c98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
PeekNamedPipe
GetProcAddress
LoadLibraryA
CreateProcessA
CloseHandle
CreatePipe
GetDriveTypeA
GetLogicalDrives
ReadFile
GetFileSize
GetLastError
CreateFileA
DeleteFileA
FindClose
FindFirstFileA
CopyFileA
GetEnvironmentVariableA
GetCurrentDirectoryA
TerminateProcess
GetTickCount
SetFilePointer
Sleep
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ws2_32

gethostname
send
select
__WSAFDIsSet
inet_addr
gethostbyname
setsockopt
socket
htons
bind
connect
closesocket
WSASetLastError
WSAStartup
WSACleanup
recv

msvcrt

_strnicmp
_strupr
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_stricmp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
rand
atoi
free
strlen
strstr
??2@YAPAXI@Z
strcpy
strcat
sprintf
memset
sscanf
_exit

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5396e843bb3296edc1071919f66c4c98

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

msvcrt

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB