f0edc9218cea45739feff87bfbc4d97e_JaffaCakes118

General

Target

f0edc9218cea45739feff87bfbc4d97e_JaffaCakes118
Size

79KB
MD5

f0edc9218cea45739feff87bfbc4d97e
SHA1

12a186592b98c140466bd9f64158218d5191af90
SHA256

4fa73741f64f6f0692aac31571fb5e555a985a01cb92788a8d4fd1db3b5eb636
SHA512

28f516ddf4fd303674f4d8c7c9634b57a8b58c2e437dae6b24e93ec783a432466fef557edf558a252368dfc2b11b219e12f555a6b9eb02f572b82707e20ad906
SSDEEP

768:WywO/5sCcgK/1AKVXYJ+IJWYuz3QLyfgPjr0QFEU2i7TQHmijOPli+B2O:1Eb1AKVXYJhW1FYPj9FEU2i/QaPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0edc9218cea45739feff87bfbc4d97e_JaffaCakes118

Files

f0edc9218cea45739feff87bfbc4d97e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

986d04160d52744f3a539a7e852ed050

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
GetCurrentThreadId
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
GetFileSize
GlobalFree
VirtualProtectEx
ReadProcessMemory
GetCurrentProcess
SetThreadPriority
IsBadReadPtr
GlobalUnlock
VirtualAlloc
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
TerminateProcess
GetPrivateProfileStringA
ExitProcess
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
ReadFile
CloseHandle

user32

UnhookWindowsHookEx
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState
SetWindowsHookExA
CallNextHookEx

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

986d04160d52744f3a539a7e852ed050

Headers

File Characteristics

Imports

kernel32

user32

wininet

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 2KB - Virtual size: 1KB