2c5afa247cba773a9228bd9b4b2e60f8_JaffaCakes118

General

Target

2c5afa247cba773a9228bd9b4b2e60f8_JaffaCakes118
Size

303KB
MD5

2c5afa247cba773a9228bd9b4b2e60f8
SHA1

e95e2aea1eb687d0462c7b62872890f5ab898c4b
SHA256

a18be2e1ac60d0926b4454dc6eb4a267520085edb936d514f958dc12d0055c60
SHA512

594cee4d24abb1d6e6fe676c026184de4d9d384d5210d55af03ae25c23cde39149b29eeb1cc24adb36a7570fe2bd3f897b20aad1444fe01ff43b50204272eac4
SSDEEP

3072:J2iQ+yrxXx+ZitbX8tAwFBp1jl1DsyOrUx7Tx8Zhj95SeTQ4YcvLRST+6:Jp2xicst5/p1jl1YyLghj9jU4TvLR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c5afa247cba773a9228bd9b4b2e60f8_JaffaCakes118

Files

2c5afa247cba773a9228bd9b4b2e60f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9603d079c8174549e27e979e1b0f41eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlFreeHeap
RtlAllocateHeap
wcscpy
wcscat
wcslen
_wcsnicmp
swprintf

rapi

CeGetVersionEx
CeGetSystemInfo
CeRapiUninit
CeRapiInitEx
CeCloseHandle
CeWriteFile
CeCreateFile
CeGetFileAttributes
CeCreateProcess
CeRapiFreeBuffer
CeFindAllFiles

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

wsock32

WSAStartup
WSACleanup
socket
htonl
htons
bind
listen
accept
setsockopt
recv
send
WSAGetLastError

kernel32

GetStartupInfoA
GetModuleHandleA
FindFirstFileW
FindClose
CreateFileW
ReadFile
WaitForSingleObject
CreateThread
CloseHandle
LocalFree
LocalAlloc
OutputDebugStringW
GetLastError

gdi32

GetStockObject
StretchDIBits

user32

GetClientRect
GetWindowRect
SetWindowPos
DestroyWindow
CheckMenuItem
PostQuitMessage
EndPaint
CreateWindowExW
BeginPaint
RegisterClassW
LoadCursorW
UpdateWindow
ShowWindow
LoadMenuW
GetDC
SetWindowTextW
wsprintfW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
wvsprintfW
DefWindowProcW

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9603d079c8174549e27e979e1b0f41eb

Headers

File Characteristics

Imports

ntdll

rapi

msvcrt

wsock32

kernel32

gdi32

user32

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB