f6065eaaa1d27561dd9ed65ad17791b2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f6065eaaa1d27561dd9ed65ad17791b2_JaffaCakes118
Size

954KB
MD5

f6065eaaa1d27561dd9ed65ad17791b2
SHA1

d83621753dcd1084e373e68448cea65cf6c02021
SHA256

0236e1fe6ff7b3d8ba09a2f401f6370762b9040207da555c23eeeaae1bd29259
SHA512

8ffb9665835375e1fbcca339c0f77727e3ba58f453cf5a00272090b92776f5201c2908dc9e469d1b99f5a991c91ad07a6159bb753f8cb28698bfc2845d69e47a
SSDEEP

12288:uXgzEut4RuAwGgc7fNuIEGpgya+sNzaOvoJpaz/g/J/vVSnn:egzEuAwj2fNuIy+sNH8az/g/J/N+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6065eaaa1d27561dd9ed65ad17791b2_JaffaCakes118

Files

f6065eaaa1d27561dd9ed65ad17791b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfdf6d4345a4fbe6646488905b872eaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetLastError
CreateMutexA
GetTempPathA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
DeleteFileA
WaitForSingleObject
lstrcatA
GetLocalTime
GetCurrentProcess
WinExec
GetModuleHandleA
OutputDebugStringA

user32

GetWindowLongA
FindWindowA
ShowWindow

urlmon

URLDownloadToCacheFileA
URLDownloadToFileA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shell32

ShellExecuteA

msvcrt

strchr
_onexit
__dllonexit
fseek
ftell
strcmp
fopen
fwrite
fclose
fread
atoi
__CxxFrameHandler
strrchr
_stricmp
memcpy
memset
malloc
strlen
strcpy
sprintf
strcat

Sections

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cfdf6d4345a4fbe6646488905b872eaf

Headers

File Characteristics

Imports

kernel32

user32

urlmon

advapi32

wininet

msvcp60

shell32

msvcrt

Sections

.data Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 8B

.data
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 8B