JaffaCakes118_0d27ebfe23363367f6b44e483e8bcc7c

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_0d27ebfe23363367f6b44e483e8bcc7c
Size

258KB
MD5

0d27ebfe23363367f6b44e483e8bcc7c
SHA1

b88e925506fe2123fc9bd79b974aae4600a8cb07
SHA256

40d98f82e36ea5c5ba587e82ded7c1d818aba5b26e5888407156b3b4f8035caa
SHA512

91036d3acb381e8b36670344192818e67409996e215e0455c357254e39b0f2934886f992bcaa5cff0f1e6e175c18dc76f4ec8c5240e8f3b0cf1d98f739592d3e
SSDEEP

6144:IyqIDbw+NoziFRZLob+lBpdgEA1fmd4qgvSg2nH:PqID/PZLob+lBpdXYmSq+STH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0d27ebfe23363367f6b44e483e8bcc7c

Files

JaffaCakes118_0d27ebfe23363367f6b44e483e8bcc7c
.exe windows:4 windows x86 arch:x86

69a13c815b27c3c264a4065ee441bf7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getservbyport
gethostbyname
WSASetLastError
ioctlsocket
WSACleanup
listen
htonl
WSAGetLastError
socket
recv
getsockopt
closesocket
connect
select
accept
getservbyname
ntohs
__WSAFDIsSet
htons
inet_addr
getsockname
bind
WSAStartup
inet_ntoa
send
gethostbyaddr

user32

LoadStringA

advapi32

OpenThreadToken
RegOpenKeyExA
RegCloseKey
GetUserNameA
GetTokenInformation
RegQueryValueExA

wininet

DetectAutoProxyUrl

kernel32

CreateMutexW
CreateDirectoryA
SetUnhandledExceptionFilter
GetStringTypeExA
FindNextFileW
IsDebuggerPresent
FindClose
GetSystemTimeAsFileTime
FormatMessageW
GlobalFree
GetModuleHandleW
CreateFileW
FindFirstFileW
GetTempPathW
CloseHandle
GetTempFileNameW
ReleaseMutex
GetCurrentThreadId
GetCurrentDirectoryA
LCMapStringA
LocalFree
GetUserDefaultLCID
GetFileSize
WaitForSingleObject
CreateDirectoryW
GetSystemDirectoryA
FindNextFileA
FreeLibrary
FindFirstFileA
UnhandledExceptionFilter
CreateThread
VirtualAllocEx

ole32

CoTaskMemFree

shlwapi

PathIsRootA
UrlIsOpaqueA
PathFileExistsW
PathUnExpandEnvStringsW
SHEnumKeyExA
wvnsprintfA
SHRegGetBoolUSValueA
PathGetDriveNumberW
SHRegOpenUSKeyA
StrToInt64ExW
PathIsUNCA
SHEnumKeyExW
PathRemoveBlanksW
StrCpyW
PathStripPathA
SHRegOpenUSKeyW
UrlGetLocationW
PathUnquoteSpacesW
PathCompactPathA
StrChrIA
PathRemoveFileSpecW
PathRemoveBackslashA
SHDeleteValueW
StrCmpNIA
PathFindSuffixArrayW
PathParseIconLocationA
SHDeleteOrphanKeyW
PathIsContentTypeA
PathAddBackslashA
UrlEscapeA

msvidc32

DriverProc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nArKE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EidghC
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zMUtSyu
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.BkBuz
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bMdnwX
Size: 1024B - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UKlwzpc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.YEGEfQd
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 214KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bJSP
Size: 512B - Virtual size: 427B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NzDSm
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yYxo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oDFQhQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

69a13c815b27c3c264a4065ee441bf7b

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

user32

advapi32

wininet

kernel32

ole32

shlwapi

msvidc32

Sections

.text Size: 19KB - Virtual size: 19KB

.nArKE Size: 3KB - Virtual size: 2KB

.EidghC Size: 2KB - Virtual size: 1KB

.zMUtSyu Size: 1KB - Virtual size: 1KB

.BkBuz Size: 2KB - Virtual size: 2KB

.bMdnwX Size: 1024B - Virtual size: 855B

.rdata Size: 2KB - Virtual size: 2KB

.UKlwzpc Size: 1KB - Virtual size: 1KB

.YEGEfQd Size: 1024B - Virtual size: 880B

.data Size: 214KB - Virtual size: 1.1MB

.rsrc Size: 3KB - Virtual size: 2KB

.bJSP Size: 512B - Virtual size: 427B

.NzDSm Size: 2KB - Virtual size: 1KB

.yYxo Size: 1KB - Virtual size: 1KB

.oDFQhQ Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.nArKE
Size: 3KB - Virtual size: 2KB

.EidghC
Size: 2KB - Virtual size: 1KB

.zMUtSyu
Size: 1KB - Virtual size: 1KB

.BkBuz
Size: 2KB - Virtual size: 2KB

.bMdnwX
Size: 1024B - Virtual size: 855B

.rdata
Size: 2KB - Virtual size: 2KB

.UKlwzpc
Size: 1KB - Virtual size: 1KB

.YEGEfQd
Size: 1024B - Virtual size: 880B

.data
Size: 214KB - Virtual size: 1.1MB

.rsrc
Size: 3KB - Virtual size: 2KB

.bJSP
Size: 512B - Virtual size: 427B

.NzDSm
Size: 2KB - Virtual size: 1KB

.yYxo
Size: 1KB - Virtual size: 1KB

.oDFQhQ
Size: 1KB - Virtual size: 1KB