55db8a18aeeeb166dd922b681b2f7129_JaffaCakes118

General

Target

55db8a18aeeeb166dd922b681b2f7129_JaffaCakes118
Size

76KB
MD5

55db8a18aeeeb166dd922b681b2f7129
SHA1

81ef539e2b655844d75012ad699f6c7ca4976110
SHA256

a7416893ddcf2b21449b1cf5e2780f99695c4870308b96f781a27ba875cffd0a
SHA512

06e87e2a6ecf617b7859577bc07236df0004a9aa3afad3cbc0fdd0175e0213c059e16cdc4085b463a374690364cb8baf789ea21c5abcc95693f89b8224b2d979
SSDEEP

1536:3dtHN2xgx6bMceHxhcpzHXfY0qbEUioRWFLtR:pYtM7Hxup7XtyzioRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55db8a18aeeeb166dd922b681b2f7129_JaffaCakes118

Files

55db8a18aeeeb166dd922b681b2f7129_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c123ff432e558a1a8d86b486cadec6e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FillConsoleOutputAttribute
SetConsoleScreenBufferSize
GetStdHandle
CloseHandle
OpenMutexA
Sleep
HeapSize
GetStartupInfoA
FlushFileBuffers
ReadFile
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetFilePointer
GetLastError
VirtualAlloc
WriteFile
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
SetConsoleTextAttribute
HeapReAlloc
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree

winmm

timeGetTime

wsock32

gethostname
recvfrom
ntohs
sendto
getsockopt
socket
htons
bind
gethostbyname
setsockopt
inet_ntoa
closesocket
WSAGetLastError
WSAStartup
htonl
WSACleanup

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zwt
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c123ff432e558a1a8d86b486cadec6e0

Headers

File Characteristics

Imports

kernel32

winmm

wsock32

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 1.3MB

.zwt Size: - Virtual size: 1B

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 1.3MB

.zwt
Size: - Virtual size: 1B