441890d29ca2c5561777a27e8b27a59b_JaffaCakes118

General

Target

441890d29ca2c5561777a27e8b27a59b_JaffaCakes118
Size

272KB
MD5

441890d29ca2c5561777a27e8b27a59b
SHA1

400c54cf544afc4ad20f71bf6fa040c401cd8223
SHA256

f464c20fa4840c8792336c5e5f337b9423b6d24062a8ea0186ce850fbf65b213
SHA512

34b623b7cfdd91184d0e8c9d38c85914bc7a59ef347b9222bc3a6bac54b2463207b0d5282dc0ffb7129ddb802240973ae8808c9c8acd21f0beb4520ebc2f0352
SSDEEP

6144:sb+RaSyqilZvlbIQlIRA0OUlwCuYzEy2wpJOM:sgaSyjZvlbvlqEEVuYzEyvpMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
441890d29ca2c5561777a27e8b27a59b_JaffaCakes118

Files

441890d29ca2c5561777a27e8b27a59b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76ef415bc0ce8fa1343e68bdae2cbebf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
ReleaseMutex
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
Sleep
CreateProcessA
CloseHandle
TerminateProcess
OpenProcess
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
SetConsoleCtrlHandler
LoadLibraryA
GetLastError
MapViewOfFile
CreateFileMappingA
GetCurrentThreadId
GetTickCount

user32

MessageBoxA
ExitWindowsEx

ws2_32

socket
closesocket
gethostbyname
htons
recv
connect
WSAStartup
WSACleanup
send

msvcrt

_isctype
_unlink
_stat
vfprintf
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
calloc
tolower
strlen
exit
strrchr
free
fprintf
strcmp
atol
sprintf
strcpy
atof
strstr
_pctype
__mb_cur_max
_ftol
time
_iob
fclose
fopen
fflush
strerror
__getmainargs
strncpy
strchr
_rmdir
fputs
_initterm
_findclose
_findnext
_findfirst
_chdir
_getcwd
_mkdir
memcpy
fgetc
_except_handler3
ctime
memset
putc
srand
fwrite
_stricmp
strcat
strtol
memmove
_beginthreadex
rand
_XcptFilter
localtime
_exit
__p___initenv

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 599B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76ef415bc0ce8fa1343e68bdae2cbebf

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

msvcrt

Sections

.text Size: 236KB - Virtual size: 235KB

.rdata Size: 4KB - Virtual size: 599B

.data Size: 12KB - Virtual size: 17KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 236KB - Virtual size: 235KB

.rdata
Size: 4KB - Virtual size: 599B

.data
Size: 12KB - Virtual size: 17KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 12KB - Virtual size: 10KB