ecd9a0ad4c7619cd02f86922299e01ec_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ecd9a0ad4c7619cd02f86922299e01ec_JaffaCakes118
Size

19KB
MD5

ecd9a0ad4c7619cd02f86922299e01ec
SHA1

35b29652d0266fa29410e82505c12520d5260f6c
SHA256

48f187e626dc81f126b6f9e3f070411e010d5b931a3aa619bce48f56d5884aba
SHA512

676c2e909c68e17d2144d02897645fd90e5c27df1b3cb8b9faf05d0f63e101da2689ef8308b34a824e4b08cd36c448dded26363d8b3d920e5db4acd17e65179e
SSDEEP

384:bCvDZHLhYS5FG9QCXe2K/2VwzEHXYHW+WuKGSt1nKHj1aLz6J+vG3lYNQy:bCLZiS5FG9QCX42VwzEHXYHW3z1KHj10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecd9a0ad4c7619cd02f86922299e01ec_JaffaCakes118

Files

ecd9a0ad4c7619cd02f86922299e01ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

82a2bc7a80a12209f8dcd5f45f0a751f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
SetEndOfFile
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetTempFileNameA
GetTempPathA
MulDiv
GetTickCount
CloseHandle
ReadFile
CreateFileA
DeleteFileA
WaitForMultipleObjects
WaitForSingleObject
SetFileAttributesA
SetFilePointer
GetModuleFileNameA
InterlockedExchange
RtlUnwind
WriteFile
lstrlenA
CreateProcessA
ExitThread
CreateThread
GetLastError
SetEvent
GlobalAlloc
lstrcpynA
lstrcpyA
CreateEventA
VirtualQuery
GlobalFree

user32

SetWindowLongA
SetDlgItemTextA
MessageBoxA
wsprintfA
CallWindowProcA
DestroyWindow
EnableWindow
CharLowerBuffA
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
SetWindowTextA
SendMessageA
FindWindowExA
GetDlgItem
GetFocus
IsWindowVisible
ShowWindow
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CloseWindow
RegisterWindowMessageA

advapi32

RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA

wininet

InternetConnectA
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetSetFilePointer
InternetCrackUrlA
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
HttpOpenRequestA
HttpSendRequestA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

download
getidex
skipcomponents

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82a2bc7a80a12209f8dcd5f45f0a751f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

version

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 868B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 868B

.reloc
Size: 1KB - Virtual size: 1KB