380f8d6fa9d929fe7d360ff9a42a5dde_JaffaCakes118

General

Target

380f8d6fa9d929fe7d360ff9a42a5dde_JaffaCakes118
Size

38KB
MD5

380f8d6fa9d929fe7d360ff9a42a5dde
SHA1

4f1d5da198f8d8e67b165eef8bc79fc24dd6d12b
SHA256

f5a868b5f75b07d73439f09868a477a01a772ab0fb1cbe77f951ee0bb8110704
SHA512

4d1ad8bc41134a69b2ae221b95888f223b702373ade4e24c5ae1eedda889a114ce4879c5cf9f041e030dba1cfceb3c978054d230ef13e23c30730041ccd3b733
SSDEEP

384:BVQ3Bun4NZ2sLJxkyU31xM52xvBv2RyGkpMSnwdB6UmVlbcUn3k9gBJJiooJ0KOu:l8XLbDUvG232gM/HQa9Y7FE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380f8d6fa9d929fe7d360ff9a42a5dde_JaffaCakes118

Files

380f8d6fa9d929fe7d360ff9a42a5dde_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceW
InterlockedExchange
GetCurrentProcess
GetLastError
PurgeComm
AllocConsole
FatalExit
GetConsoleNlsMode
FindAtomW
DeleteTimerQueue
GetCurrentThreadId
GetTempPathW
GetUserDefaultLCID
GlobalAlloc
SetUnhandledExceptionFilter
ClearCommBreak
CreateMemoryResourceNotification
CreateFileW
AddAtomW
ExitThread
TerminateProcess
DeleteCriticalSection
GetModuleHandleW
CancelIo
OpenConsoleW
EnumDateFormatsExW
CreateMutexW
GlobalAddAtomW
CancelTimerQueueTimer
VirtualAlloc

msvcrt

_chgsign
_close
_assert
_beep
_access
_cabs
_atoldbl
_chdir
_cgetws
_atoi64

ws2_32

bind
WSACleanup
closesocket
socket
WSAStartup
WSALookupServiceNextW
listen

Sections

.data
Size: - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.data Size: - Virtual size: 522KB

.text Size: 31KB - Virtual size: 30KB

.bss Size: 512B - Virtual size: 256B

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 576B

.rsrc Size: 3KB - Virtual size: 23KB

.data
Size: - Virtual size: 522KB

.text
Size: 31KB - Virtual size: 30KB

.bss
Size: 512B - Virtual size: 256B

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 3KB - Virtual size: 23KB