ffc8d1b620cfcccd77f45aa6f3759f1a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ffc8d1b620cfcccd77f45aa6f3759f1a_JaffaCakes118
Size

76KB
MD5

ffc8d1b620cfcccd77f45aa6f3759f1a
SHA1

928e1829d80e6c615446d937f56e5e9f9d02faf8
SHA256

8e1c9f1cc1b7304ad685fb543eb118b6b4046f644f5c5e4d4b7438adbfcad3de
SHA512

a55bab1aea13324b20443f8399f37f7741957be4c9f40ba9a21e44efcee3de2ba985eadd7634518e9e7c6e0e2637b12014d855b1ac9f80c80a197934422f8914
SSDEEP

1536:AiDMO5CMc41ivcjWVbT6HLUXmM0TcsZjHejxVQ+t:A6H7CVbodTz+jxVQ+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffc8d1b620cfcccd77f45aa6f3759f1a_JaffaCakes118

Files

ffc8d1b620cfcccd77f45aa6f3759f1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cf0a4402e7de49255766cd880e08f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetGetConnectedState
InternetOpenUrlW
InternetReadFile
InternetOpenW
InternetAttemptConnect
InternetCloseHandle

kernel32

WriteFile
CloseHandle
Sleep
ResumeThread
lstrcpyW
FileTimeToSystemTime
GetModuleFileNameW
CreateFileW
DeleteFileW
GetSystemTime
GetSystemDirectoryW
CopyFileW
GetFileTime
GetLastError
ExitProcess
SetCurrentDirectoryW
SetWaitableTimer
CreateWaitableTimerW
WaitForSingleObject
GetTickCount
CreateThread
OpenWaitableTimerW
WriteConsoleW
GetConsoleOutputCP
SetFileTime
lstrcatW
GetLocalTime
SystemTimeToFileTime
GetCurrentDirectoryW
CreateProcessW
HeapSize
CreateFileA
FlushFileBuffers
GetTimeZoneInformation
InterlockedIncrement
WriteConsoleA
SetStdHandle
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
SetFilePointer

user32

CharLowerW

advapi32

RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenSCManagerW
DeleteService
CloseServiceHandle
SetServiceStatus
CreateServiceW
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW

ole32

OleInitialize
OleUninitialize
CLSIDFromProgID
CoCreateInstance

oleaut32

VarBstrCat
VariantClear
SysAllocString
SysFreeString

iphlpapi

GetIfTable

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8cf0a4402e7de49255766cd880e08f74

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

ole32

oleaut32

iphlpapi

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 42KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 42KB