e9940ad70fa7586257da7a217949eede_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e9940ad70fa7586257da7a217949eede_JaffaCakes118
Size

29KB
MD5

e9940ad70fa7586257da7a217949eede
SHA1

5f0037324e931c948e88976dcf0338e4ec80dc14
SHA256

c2eb12d78d5ca3f0d7db08640275fbeb2dabc975fcbc6ffe26d87b74520f292c
SHA512

9018f233344d6805a7bf063fff7d3c1e481417e817f65173ab0ace93458fc52ad76e457cd0a49155a6e11d34ffd3d4b19a8ab0ad29448d7d27bb5c264bbdc1e0
SSDEEP

768:u1fHoAFlL1REwpHodCRfbnG1nzf0I7xQrc/6AZRJf:Sw+L1uw5odmLG1nzcKCczZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9940ad70fa7586257da7a217949eede_JaffaCakes118

Files

e9940ad70fa7586257da7a217949eede_JaffaCakes118
.dll windows:4 windows x86 arch:x86

48cedb6311d50054e32f66cc31d4ce21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateEventA
GetFileAttributesA
ReadFile
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
GetTickCount
HeapFree
HeapAlloc
FreeLibrary
GlobalAlloc
GetSystemDefaultLCID
GetUserDefaultLCID
lstrlenA
LoadLibraryA
WriteFile
lstrcpynA
SetFilePointer
lstrcmpA
CreateFileA
GetProcessHeap
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
HeapReAlloc
QueryPerformanceCounter
GetStringTypeA
GetLastError
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
WideCharToMultiByte
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
InterlockedExchange

user32

MessageBoxA
CallWindowProcA
EnableWindow
SetWindowTextA
IsWindowVisible
DestroyWindow
GetWindowRect
GetFocus
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
wsprintfW
SetWindowLongA
SetDlgItemTextA
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
CreateWindowExW

gdi32

SelectObject

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

wininet

HttpOpenRequestA
InternetSetFilePointer
InternetOpenA
InternetConnectA
InternetCloseHandle

Exports

Exports

check
copy
run

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48cedb6311d50054e32f66cc31d4ce21

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB