2e86a2e3904d697253a1414e5991f161_JaffaCakes118

General

Target

2e86a2e3904d697253a1414e5991f161_JaffaCakes118
Size

16KB
MD5

2e86a2e3904d697253a1414e5991f161
SHA1

f4422d6900bb83fdf0563433762972674d84c03a
SHA256

63c451cc0f97e2f777d885664410f3c28ad2584041371514cb7f1a41b8862ebb
SHA512

7a898370f4c9b902b91aa5f5292b4cb38426b26afbc2a6e2c6147529dd83f54d4d3f5cbea4e339fa496187b8c2ad020432ede9c739d1ce722d066cd80a6b5faa
SSDEEP

384:nUwucQGTEu0XmrcnP+tqFFKVIrOxwID/qbCyNw:UwucTnjI8mKVRx//PyO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e86a2e3904d697253a1414e5991f161_JaffaCakes118

Files

2e86a2e3904d697253a1414e5991f161_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bca4a3646c7e04ab6ca927814ced5fee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord926
ord924
ord540
ord535
ord858
ord6663
ord860
ord4278
ord2818
ord939
ord6877
ord537
ord2846
ord800
ord2764

msvcrt

_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
_except_handler3
strncmp
atoi
malloc
__p__commode
__p__fmode
sprintf
strlen
time
srand
printf
rand
memcpy
strstr
free
__CxxFrameHandler
memset
strcat
strcpy
exit
__set_app_type
_controlfp
_itoa

kernel32

CreateProcessA
GetCurrentThread
ResumeThread
LoadLibraryA
SetFileAttributesA
GetModuleFileNameA
Sleep
GlobalMemoryStatus
GetVersionExA
CreateThread
CloseHandle
WaitForSingleObject
ExitThread
FreeLibrary
SetThreadPriority
GetTickCount
GetStartupInfoA
GetModuleHandleA
GetSystemDirectoryA
CopyFileA
GetLastError
lstrlenA
GetShortPathNameA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetCurrentProcess
SetPriorityClass
GetProcAddress

user32

wsprintfA

advapi32

DeleteService
OpenSCManagerA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegCloseKey
CloseServiceHandle
RegSetValueExA
RegOpenKeyA
StartServiceA
CreateServiceA
OpenServiceA

msvcp60

??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ

ws2_32

inet_addr
closesocket
WSAGetLastError
send
recv
connect
gethostbyname
socket
WSAStartup
sendto
htonl
setsockopt
WSASocketA
htons

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bca4a3646c7e04ab6ca927814ced5fee

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

advapi32

msvcp60

ws2_32

Sections

.text Size: 15KB - Virtual size: 15KB

.text
Size: 15KB - Virtual size: 15KB