f07ed8f79312ad44ccb0c7b15b5459e6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f07ed8f79312ad44ccb0c7b15b5459e6_JaffaCakes118
Size

24KB
MD5

f07ed8f79312ad44ccb0c7b15b5459e6
SHA1

83abb4508f7c255c81e7a0a0c9ee9a89d0580820
SHA256

32f5d35bad15c6c3335e4188c9d0371b3efa31f78bc655905554bb0d89c248bb
SHA512

2313a3091249bf10ec6fe90b03b5cb679739a06beda7ed813f04187d6c3f528f6e80d94d81bfad14ed4d04c80b863e9c9bf0ff9da4061a7cb3d010c320566f82
SSDEEP

384:dSTSb6hcUUt2E1pMvS9t7ko2lpaQFxH/f4kVdjaLacmkC0GJsJxXSdqWoZDEWA:dRpoGtwoAaQFxfftjaLacmkLGKddm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07ed8f79312ad44ccb0c7b15b5459e6_JaffaCakes118

Files

f07ed8f79312ad44ccb0c7b15b5459e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b3f6dbe2d5f27703cdd97b1aab67bbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetTempPathA
Sleep
WinExec
GetWindowsDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
GetLastError
CreateMutexA
GetVersionExA
WaitForSingleObject
LoadLibraryA
lstrcmpiA
SetFileAttributesA
DeleteFileA
lstrcatA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetCurrentProcess
GetProcAddress

urlmon

URLDownloadToCacheFileA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

wininet

DeleteUrlCacheEntry

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

msvcrt

strcpy
_onexit
__dllonexit
fopen
fwrite
memcpy
memset
malloc
strchr
strlen
_stricmp
sprintf
strcat
__CxxFrameHandler
atoi
fread
fclose

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1b3f6dbe2d5f27703cdd97b1aab67bbd

Headers

File Characteristics

Imports

kernel32

urlmon

advapi32

wininet

msvcp60

netapi32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 8B

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 8B