146584bb99d9e83a33b5cceadee429c3_JaffaCakes118

General

Target

146584bb99d9e83a33b5cceadee429c3_JaffaCakes118
Size

116KB
MD5

146584bb99d9e83a33b5cceadee429c3
SHA1

d97a8a8992ec83896b807cd0c725e7fe1edfbaf9
SHA256

85222df8f05f56359f30ed12d95d41e472bcb56d793043eebb06a224364d3303
SHA512

fccf9c8fbd25f9a3559c1ffba2c89d1c46dc3b177f8b2435ecd220b75e57e6e4b6dcee6c2e26fe079c741544558a61d2df613137d42253fbc7083e0a621b66e6
SSDEEP

1536:RIopVcwWq8/yYzhuCo/gVvRjmrLr57T7eJeFe8UtQt:Oopie7gRRCdaJl8mQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146584bb99d9e83a33b5cceadee429c3_JaffaCakes118

Files

146584bb99d9e83a33b5cceadee429c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d54f3e7cbe7e929de3aa56515c839d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
htonl
connect
select
__WSAFDIsSet
send
WSAStartup
ioctlsocket
setsockopt
ntohl
WSASocketA
bind
getsockname
listen
WSAAccept
ntohs
htons
WSAGetLastError
sendto
recvfrom
shutdown
closesocket

kernel32

SetHandleCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
HeapSize
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CreateFileA
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
FreeConsole
HeapAlloc
GetSystemTimeAsFileTime
GetLastError
HeapFree
ExitThread
CreateThread
GetTimeZoneInformation
GetCommandLineA
GetVersionExA
GetProcessHeap
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlushFileBuffers
GetFileAttributesA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d54f3e7cbe7e929de3aa56515c839d9

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 12KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 12KB