42ad6b899f932e3ffe92d0ed799d64c1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42ad6b899f932e3ffe92d0ed799d64c1_JaffaCakes118
Size

85KB
MD5

42ad6b899f932e3ffe92d0ed799d64c1
SHA1

6dcdbdd1398f8a961f9245bb7d8f9faae0e021ea
SHA256

0992cd011d2d29624b4b5837c3c1bc6639b9ea7e23739a08ac31db8089a08e9f
SHA512

93579f6b2036d7f1293b0d9d8d1a5d75e696daa48b8844818c894f1cd31a520d0f79a5e2703f2bb9ddb164e82a2cbae95d8f7914bf276e564f39de481c370766
SSDEEP

1536:K5u/C9HAW4oZQmTEmmbpOoFc//o3LB0ix2qje5dh:K/ZbaXow2ix5je5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ad6b899f932e3ffe92d0ed799d64c1_JaffaCakes118

Files

42ad6b899f932e3ffe92d0ed799d64c1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e3b514783a341d8f42e9cb8b453eebd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyA
RegSetValueExA

ws2_32

inet_addr
ntohs
sendto
recv
connect
select
WSAGetLastError
htons
socket
__WSAFDIsSet
closesocket
gethostbyname
send
WSAStartup
ioctlsocket

user32

CharLowerA
CharUpperA
CharUpperBuffA
wsprintfA
wvsprintfA

kernel32

HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
lstrlenA
WaitForSingleObject
GetTickCount
WideCharToMultiByte
CreateProcessA
FileTimeToSystemTime
GetTimeZoneInformation
GetProcAddress
GetLocalTime
LoadLibraryA
GetModuleHandleA
CloseHandle
FileTimeToLocalFileTime
ExitProcess
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
WriteFile
Sleep
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
ExitThread
GetLastError
CopyFileA
SetFileAttributesA
GetModuleFileNameA
CreateMutexA
GetTempPathA
DeleteFileA
CreateThread
lstrcpyA
lstrcmpA
lstrcpynA
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
GetProcessHeap
lstrcmpiA
GlobalFree
GetFileSize
GlobalAlloc
ReadFile
GetTempFileNameA
MapViewOfFile
UnmapViewOfFile
GetCurrentThread
GetWindowsDirectoryA
GetDriveTypeA
GetEnvironmentVariableA
SetThreadPriority
FindFirstFileA
FindClose
CreateFileMappingA
FindNextFileA
SetFilePointer
GetSystemTime
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e3b514783a341d8f42e9cb8b453eebd

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ws2_32

user32

kernel32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 7KB - Virtual size: 10KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 7KB - Virtual size: 10KB