bd81c9b4e808986568e82f507e8a5b3c_JaffaCakes118

General

Target

bd81c9b4e808986568e82f507e8a5b3c_JaffaCakes118
Size

134KB
MD5

bd81c9b4e808986568e82f507e8a5b3c
SHA1

139b69fac6cace200cf8bbf0617ebff85bfa295f
SHA256

ebd1e9e477918163f3c7ba846f5de93da3cd32bacbd0405317e3053469870888
SHA512

3cde64c726d11a3c4645ad73ae58a4abc93f0e9ca7730da14ad4b486d69999d91108e861e5accac347eed2fda51d3d8c6f26aed45269be820d16ca52c1c96779
SSDEEP

3072:vv/AGWxl0vhtBNwTYYgioDlwbtVBCN1xRWy1MaiyzUhAv2EdK:X/ApshwaiilwTIN1xRSaJUhi7dK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd81c9b4e808986568e82f507e8a5b3c_JaffaCakes118

Files

bd81c9b4e808986568e82f507e8a5b3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

693ce23328958ec1897014ce5da9c5cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
getpeername

kernel32

FreeEnvironmentStringsW
GetSystemInfo
VirtualProtect
GetProcAddress
SuspendThread
LoadLibraryA
HeapAlloc
HeapReAlloc
GetProcessHeap
GetTickCount
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
CloseHandle
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA

user32

wsprintfA
wvsprintfA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

693ce23328958ec1897014ce5da9c5cf

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 16KB

.rsrc Size: 101KB - Virtual size: 101KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 16KB

.rsrc
Size: 101KB - Virtual size: 101KB