44b8ad1da0aeea9686060f4520e3625d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44b8ad1da0aeea9686060f4520e3625d_JaffaCakes118
Size

284KB
MD5

44b8ad1da0aeea9686060f4520e3625d
SHA1

915c2e437d07a297e439e7658fbca8561073a6a3
SHA256

74301a5ad413485b1f2500e5c6ad79000f1d83f136809298aa2248990ee26c41
SHA512

e44e746c68b8a818aae7b74b8b5f5dd970edf515f76e63957435e3b0c235f869edea6896380d862ee57d76925b11da9b4d7815cd53a56529b9b0581ef7b56dfd
SSDEEP

3072:E/kCWC2A+HgvPrDlNeu0O9ZCZCqwYCgoDmomGJ1uCEt8tOF5pU+E+X8ec:EMCWVA+HkeujDKCqwJvlJnobG+sec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b8ad1da0aeea9686060f4520e3625d_JaffaCakes118

Files

44b8ad1da0aeea9686060f4520e3625d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ce6f887f3db0ee836081dc68f9b9c6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetProcAddress
VirtualAlloc
lstrcmpA
Sleep
FindClose
VirtualFree
GetFileSize
FindFirstFileA
lstrcpyA
MoveFileExA
GetLastError
CreateThread
CopyFileA
FindNextFileA
CloseHandle
lstrcatA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FreeLibrary
TerminateThread
GetCommandLineA
GetModuleFileNameA
GetWindowsDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
ExitProcess
GetSystemDirectoryA
LoadLibraryA
CreateFileA
ReadFile
GetSystemTime
GetLocalTime
WriteFile
GetVersion
MultiByteToWideChar
GetACP
GetOEMCP
IsBadCodePtr
IsBadReadPtr
GetCPInfo
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
IsBadWritePtr
HeapCreate
HeapDestroy
SetFilePointer
GetStdHandle
lstrlenA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
SetEnvironmentVariableA
CompareStringW
CompareStringA
RaiseException
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
FreeEnvironmentStringsW
WideCharToMultiByte
GetTimeZoneInformation
RtlUnwind
GetModuleHandleA
GetStartupInfoA
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA

user32

GetForegroundWindow
GetWindow
GetWindowTextA
CloseWindow
GetDlgCtrlID
DialogBoxParamA
SendMessageA
SetTimer
SetDlgItemInt
SetWindowLongA
KillTimer
EndDialog
SetWindowPos
PostMessageA
MessageBoxA
FindWindowA
SetForegroundWindow
GetDesktopWindow
GetParent
GetDlgItem

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA

ws2_32

listen
WSAStartup
socket
htons
htonl
bind
WSAAsyncSelect
accept
recv
WSAGetLastError
send

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ce6f887f3db0ee836081dc68f9b9c6a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 172KB - Virtual size: 372KB

.rsrc Size: 4KB - Virtual size: 568B

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 172KB - Virtual size: 372KB

.rsrc
Size: 4KB - Virtual size: 568B