43fde1d5aefc79128133ffaeaba3915a_JaffaCakes118

General

Target

43fde1d5aefc79128133ffaeaba3915a_JaffaCakes118
Size

48KB
MD5

43fde1d5aefc79128133ffaeaba3915a
SHA1

1281ff7356a6e9094fe1ac85f11a365b2357eec9
SHA256

28e957b0a3402ca6310214d282a23320d4ab534086a5b1b98c9f1efbfbbb4813
SHA512

ca74096d7b99952fde388978632c293b1a9c96d225c91a35004af19915ddf1d74c6aab5b8e42aa42517ff1ecdb30f1e203df2c9e3daef5433df8a688a6c24ef6
SSDEEP

384:F5Q3Bun4NZ2sLJxkyU31xM52xvBv2RyGkpMSnwdB6UmVlbcUn3k9gBJJiooJ0KOx:V8XLbDUvG232gM/HQa9Y7FEi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43fde1d5aefc79128133ffaeaba3915a_JaffaCakes118

Files

43fde1d5aefc79128133ffaeaba3915a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceW
InterlockedExchange
GetCurrentProcess
GetLastError
PurgeComm
AllocConsole
FatalExit
GetConsoleNlsMode
FindAtomW
DeleteTimerQueue
GetCurrentThreadId
GetTempPathW
GetUserDefaultLCID
GlobalAlloc
SetUnhandledExceptionFilter
ClearCommBreak
CreateMemoryResourceNotification
CreateFileW
AddAtomW
ExitThread
TerminateProcess
DeleteCriticalSection
GetModuleHandleW
CancelIo
OpenConsoleW
EnumDateFormatsExW
CreateMutexW
GlobalAddAtomW
CancelTimerQueueTimer
VirtualAlloc

msvcrt

_chgsign
_close
_assert
_beep
_access
_cabs
_atoldbl
_chdir
_cgetws
_atoi64

ws2_32

bind
WSACleanup
closesocket
socket
WSAStartup
WSALookupServiceNextW
listen

Sections

.data
Size: - Virtual size: 522KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8da848238edc192e427de1898bfda9cc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ws2_32

Sections

.data Size: - Virtual size: 522KB

.text Size: 31KB - Virtual size: 30KB

.bss Size: 512B - Virtual size: 256B

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 576B

.rsrc Size: 12KB - Virtual size: 31KB

.data
Size: - Virtual size: 522KB

.text
Size: 31KB - Virtual size: 30KB

.bss
Size: 512B - Virtual size: 256B

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 12KB - Virtual size: 31KB