f25677d337ebc5aaf971a42de7adb6bd_JaffaCakes118

General

Target

f25677d337ebc5aaf971a42de7adb6bd_JaffaCakes118
Size

11KB
MD5

f25677d337ebc5aaf971a42de7adb6bd
SHA1

a68eb6202ad77f8f54d9c958bc317a4c4e04bc9b
SHA256

8113b75646a10f11eb58d93f030aecc47a673980d601a96e685218bdd9eb802a
SHA512

930b3099c75cded3b47a1cfbec98c326e7ec24c631f70ae587f603fe1ae406d8a87fc18b20d68aa2ff77fd9d73475d5849c986789b617304ef54913c0f4ff652
SSDEEP

192:HeUN3WzpLeL0JGHlmSUxXDEgnMw3sxur3hE7x7mYc:HJ3WzpKL00FmLBDE2T3sxur3hE7x7Tc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f25677d337ebc5aaf971a42de7adb6bd_JaffaCakes118

Files

f25677d337ebc5aaf971a42de7adb6bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89a20f151ca1bb4c33db699763fa0b3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sufer32

UninstallHook
InstallHook

user32

SetTimer
SendMessageA
RegisterClassExA
PostQuitMessage
OpenClipboard
GetWindowTextA
GetMessageA
GetForegroundWindow
TranslateMessage
GetClassNameA
FindWindowExA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CloseClipboard
wsprintfA
GetClipboardData

kernel32

GlobalAlloc
GetStartupInfoA
GetModuleHandleA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
WinExec
TerminateProcess
SystemTimeToFileTime
Sleep
Process32Next
Process32First
GlobalUnlock
GlobalLock
GlobalFree
GetSystemDirectoryA
GetWindowsDirectoryA
GetSystemTime
CloseHandle
CompareStringA
CreateDirectoryExA
CreateFileA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA

wsock32

socket
WSACleanup
send
recv
listen
htons
closesocket
bind
accept
WSAAsyncSelect
WSAStartup

wininet

DeleteUrlCacheEntryA
InternetOpenA
InternetGetConnectedState
InternetConnectA
InternetCloseHandle
FtpPutFileA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA

urlmon

URLDownloadToFileA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

89a20f151ca1bb4c33db699763fa0b3b

Headers

File Characteristics

Imports

sufer32

user32

kernel32

wsock32

wininet

urlmon

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 77KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 77KB