116cc7e5728fd0df5967524a9ec863e3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

116cc7e5728fd0df5967524a9ec863e3_JaffaCakes118
Size

180KB
MD5

116cc7e5728fd0df5967524a9ec863e3
SHA1

1546079dae4e6e46f4ef5cdb257cdfcb5959cd74
SHA256

6da1746ac0af9403ae9b38956a85a68140591950b9c7c0f8d6b318c7b29fc97c
SHA512

4feabd0b18c59a4bee1df431b99fe54bfa196e2fc317261de1e7ee3c6a562e28287bbc3b4349f58b23910dfc27eccbb83cfa39d89c2979524b0fa8833dbb4d12
SSDEEP

3072:TmrhzagPSJpVgoU73aFOTEt/o76anFZOuajmIQ:TmrtagPSJTpQTSY6ansS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116cc7e5728fd0df5967524a9ec863e3_JaffaCakes118

Files

116cc7e5728fd0df5967524a9ec863e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

874858082d94c248a0e8509bdec2d41a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
bind
listen
select
__WSAFDIsSet
accept
recv
ioctlsocket
WSAStartup
WSAGetLastError
WSACleanup
gethostbyname
inet_addr
socket
htons
connect
send
shutdown
closesocket

kernel32

ExpandEnvironmentStringsA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
Sleep
GetLastError
CreateThread
GetModuleFileNameA
ExitThread
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
ReadFile
CloseHandle
WriteFile
TransactNamedPipe
CreateFileA
CopyFileA
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
GetTimeFormatA
GetDateFormatA
GetFileSize
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
SetFilePointer
ExitProcess
CreateProcessA
GetSystemDirectoryA
GetLocalTime
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
GetFileTime
SetFileAttributesA
GetModuleHandleA
GetTempPathA
GetCurrentProcess
TerminateProcess
lstrcmpiA
OpenProcess
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
CreatePipe
GetLogicalDrives
GetVersionExA
GlobalMemoryStatus
LoadLibraryA
GetProcAddress
GetComputerNameA
DeleteFileA
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
TerminateThread
MoveFileA
GetLocaleInfoA
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetCPInfo

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

874858082d94c248a0e8509bdec2d41a

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 57KB - Virtual size: 592KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 57KB - Virtual size: 592KB