00966766df88d01e7681309edfc92b34_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

00966766df88d01e7681309edfc92b34_JaffaCakes118
Size

76KB
MD5

00966766df88d01e7681309edfc92b34
SHA1

55355b32d61dc9aa5fea74aa7c5b9c47c3bffd8f
SHA256

4f0c3747e24b2c595478b9d66c6efa31e67bcad99bbdf52d406f16cba9175939
SHA512

6f1a8a343707e04cbb5c06e2affb22e2f1c30f6a0800238956705bafd9a7349caa75d040ad85ab00fd1c886dfcf340035046999738ccc7eb314e7976718195a2
SSDEEP

1536:EDuyC/8Pxnuk8U6JjGdaXbCmwm6xsATUEexmamtL:jUP0o+bAtHexmamtL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00966766df88d01e7681309edfc92b34_JaffaCakes118

Files

00966766df88d01e7681309edfc92b34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46156efbb6b2fe8d68fe56d353121c7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenUrlW
InternetGetConnectedState
InternetReadFile
InternetAttemptConnect
InternetOpenW

kernel32

GetFileTime
CloseHandle
Sleep
ResumeThread
lstrcpyW
FileTimeToSystemTime
GetModuleFileNameW
CreateFileW
GetSystemTime
GetSystemDirectoryW
CopyFileW
GetTimeZoneInformation
GetLastError
WriteFile
SetCurrentDirectoryW
SetWaitableTimer
CreateWaitableTimerW
WaitForSingleObject
DeleteFileW
GetTickCount
OpenWaitableTimerW
CreateThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetFileTime
lstrcatW
GetLocalTime
SystemTimeToFileTime
GetCurrentDirectoryW
CreateProcessW
HeapSize
CreateFileA
FlushFileBuffers
ExitProcess
GetModuleHandleA
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
MultiByteToWideChar
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

GetForegroundWindow
SetForegroundWindow
CharLowerW

advapi32

OpenServiceW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenSCManagerW
DeleteService
CloseServiceHandle
SetServiceStatus
CreateServiceW
ChangeServiceConfigW
QueryServiceConfigW

ole32

CoCreateInstance
CLSIDFromProgID
OleInitialize
OleUninitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
VarBstrCat

iphlpapi

GetIfTable

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

46156efbb6b2fe8d68fe56d353121c7c

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

ole32

oleaut32

iphlpapi

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 41KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 41KB