468f7cc330d6dd6ce6c9ea0e9bbc3c05_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

468f7cc330d6dd6ce6c9ea0e9bbc3c05_JaffaCakes118
Size

70KB
MD5

468f7cc330d6dd6ce6c9ea0e9bbc3c05
SHA1

7105e4457ecba10510d72335c5a3cfbf2215cc92
SHA256

2f83cda54e2db7d28acc0af7bea70a113ebb30f5833fde24c13b724b6221d592
SHA512

0385ee2aa0d69c0b6e25177c6ef3aab4014ae0a64621a28c9303de4ace9b514aabbc21c17d3e8317cd749c717aab24223ea4e39d7461039e5f4d15deae1d9d46
SSDEEP

384:AsS71e8dYXGHaWRxL/rd8eavTS3VDe38zc9gt68oAeVuu2b4Z77fkNz61F8Sp5:AsC1ddH38DG3Vaswv/uu28fkNz8/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
468f7cc330d6dd6ce6c9ea0e9bbc3c05_JaffaCakes118

Files

468f7cc330d6dd6ce6c9ea0e9bbc3c05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3e78b109095e330a55241c7ca4b4b9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord823
ord2243
ord2414
ord3663
ord3626
ord3619
ord537
ord4202
ord1601
ord800
ord535
ord6663
ord6648
ord2919
ord6877
ord2915
ord825

msvcrt

_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
_CxxThrowException
_mbsstr
wcstombs
strcmp
strcat
strncmp
strstr
exit
strcpy
tolower
isspace
isprint
sprintf
__CxxFrameHandler
memset
isalnum
memcpy
_acmdln
__getmainargs
_controlfp
__set_app_type
strlen
malloc
_stricmp
wcslen
free
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
strncpy
_initterm

kernel32

GetStartupInfoA
DeviceIoControl
CreateFileA
GetLastError
SetPriorityClass
GetCurrentProcess
GetVersionExA
ExitProcess
ReleaseMutex
CreateMutexA
WriteFile
lstrlenA
SetFilePointer
lstrcpyA
Sleep
lstrlenW
WideCharToMultiByte
LocalFree
MultiByteToWideChar
FreeLibrary
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
GetComputerNameA
CreateThread
GetLocalTime
LoadLibraryA
CloseHandle

user32

FindWindowExA
SetActiveWindow
BringWindowToTop
SetForegroundWindow
MoveWindow
PostThreadMessageA
GetInputState
MessageBoxA
wsprintfA
SendMessageTimeoutA
RegisterWindowMessageA
DispatchMessageA
GetWindowLongA
GetWindowRect
GetMessageA
LoadCursorA
SetCursor
PostQuitMessage
DefWindowProcA
FindWindowA
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
EnumChildWindows
GetWindowTextA
GetClassNameA
WindowFromPoint
GetCursorPos
GetForegroundWindow
SendMessageA
SetFocus
TranslateMessage
GetClientRect

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysFreeString

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

iphlpapi

GetAdaptersInfo

ws2_32

socket
WSAStartup
gethostbyname
connect
closesocket
send
recv
WSACleanup
htons

shlwapi

StrStrIA

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d3e78b109095e330a55241c7ca4b4b9f

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

ole32

oleaut32

msvcp60

iphlpapi

ws2_32

shlwapi

Sections

.text Size: 69KB - Virtual size: 68KB

.text
Size: 69KB - Virtual size: 68KB