45dc6b90587c122cd1f24996f0da2718_JaffaCakes118

General

Target

45dc6b90587c122cd1f24996f0da2718_JaffaCakes118
Size

100KB
MD5

45dc6b90587c122cd1f24996f0da2718
SHA1

38b06247126910efb994cd490986a87017507823
SHA256

e2a127018b8ec1cbe64c7c7b283eb6a83155d6112bafe58cdf4f05de05e2ba2a
SHA512

c233011f98dc8fb7ad992387d54843d854fe8c2073d589a6144d9f3e4e59167fb3046b2caf5445dedc3b63259d30c24d527f7490b020bc5fa91e6a4f6dabe476
SSDEEP

1536:gd7ULiimlJfmyoKw2unToIftIOlIOu+oY/ZsZANr8XA/:gdY1eJ+ihKTBfnvu+ouMANrF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45dc6b90587c122cd1f24996f0da2718_JaffaCakes118

Files

45dc6b90587c122cd1f24996f0da2718_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b6c16de886d5b8ec3402a81a20aef8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

closesocket
htons
socket
connect
gethostbyname
send
recv
WSAStartup
WSACleanup

kernel32

CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetLastError
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
CreateFileA
GetCPInfo

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.drdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0b6c16de886d5b8ec3402a81a20aef8f

Headers

File Characteristics

Imports

wsock32

kernel32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 12KB - Virtual size: 17KB

.drdata Size: 20KB - Virtual size: 20KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 12KB - Virtual size: 17KB

.drdata
Size: 20KB - Virtual size: 20KB