400bee36e3f3cc575bd076bb693c4760_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

400bee36e3f3cc575bd076bb693c4760_JaffaCakes118
Size

213KB
MD5

400bee36e3f3cc575bd076bb693c4760
SHA1

15f79dcaa02d632a73ae2135f8ccce972273bc72
SHA256

dde6db404b2976e3be0ab9eac55f93c83029d57fc51d98a99c15b966b5822f87
SHA512

8c856b2013b66ee796a820c976049e1b23737b6557d8e40ee7ecd517ee6f4276ccafb25a91628f0979f0ba068902179e4bfba7edf71c09331c51257624468f00
SSDEEP

6144:XMcX2FRJt47PzjCn5ArJFINKN4NdNTyVWQXSaU6lZp46xgu:X52DJtCzjCn5ArJFINKN4NdNTyVWQXSE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
400bee36e3f3cc575bd076bb693c4760_JaffaCakes118

Files

400bee36e3f3cc575bd076bb693c4760_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05f74806592a3ab679f9f0d3d3a65418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
connect
WSACleanup
WSAStartup
socket
setsockopt
ioctlsocket
htons
bind
listen
select
__WSAFDIsSet
accept
send
recv
closesocket

kernel32

GetFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetLastError
Sleep
CreateThread
GetModuleFileNameA
lstrcmpiA
ExitThread
LeaveCriticalSection
EnterCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLocalTime
CloseHandle
WriteFile
CreateFileA
MultiByteToWideChar
ReadFile
TransactNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ExitProcess
CreateProcessA
GetSystemDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetTimeFormatA
GetDateFormatA
GetFileSize
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetFilePointer
LoadLibraryA
GetProcAddress
GetModuleHandleA
FormatMessageA
GlobalUnlock
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFileTime
ExpandEnvironmentStringsA
SetFileAttributesA
GetTempPathA
WideCharToMultiByte
GetComputerNameA
CopyFileA
GetCurrentProcess
TerminateProcess
OpenProcess
DeleteFileA
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
MoveFileA
TerminateThread
GetExitCodeProcess
PeekNamedPipe
DuplicateHandle
CreatePipe
GetLocaleInfoA
GetVersionExA
GetLogicalDrives
GlobalMemoryStatus
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetCommandLineA
GetVersion
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 591KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

05f74806592a3ab679f9f0d3d3a65418

Headers

File Characteristics

Imports

ws2_32

kernel32

Sections

.text Size: 149KB - Virtual size: 149KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 57KB - Virtual size: 591KB

.text
Size: 149KB - Virtual size: 149KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 57KB - Virtual size: 591KB