08ad3ecc737fffa6e75b3a9e7d387fd0_JaffaCakes118

General

Target

08ad3ecc737fffa6e75b3a9e7d387fd0_JaffaCakes118
Size

42KB
MD5

08ad3ecc737fffa6e75b3a9e7d387fd0
SHA1

5dc0e1ed9b901ecf34e7a976ba49ec94f04e0d15
SHA256

cf9930dd187bfe2577059d7f3d54b4bb315234c973e2f242043ed6072e1b4828
SHA512

8410473e07182bfa1104e7aa49b5970f339c2b7dad515d465f8a728f7a15b9caf6031f33b987cb40659147fed8f1c4b3f7e493f27ad78a0eda99f07ceb30b0e4
SSDEEP

768:KEw530rutJCaaZ7SznpIlJ55GYJ99yZVi88uaUkgfelcIuApzJ7Pr:8530utJCBZ7um/yY5g4cYzJjr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ad3ecc737fffa6e75b3a9e7d387fd0_JaffaCakes118

Files

08ad3ecc737fffa6e75b3a9e7d387fd0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

53e2036cc080cf51ddd2de03b274ed16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA

user32

SetWindowLongA
GetWindowLongA
GetWindowThreadProcessId
GetWindowTextA
EnumWindows
GetParent
CallWindowProcA
EnumChildWindows
SetWindowTextA
wsprintfA

ws2_32

send
connect
socket
htons
inet_addr
closesocket
recv
select
inet_ntoa

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
isalpha
free
_initterm
malloc
_adjust_fdiv
isalnum
memcpy
memset
memcmp
sscanf

kernel32

RtlZeroMemory
GetExitCodeThread
TerminateThread
GetCurrentDirectoryA
GetCurrentProcessId
IsBadReadPtr
GetPrivateProfileStringA
lstrlenW
WideCharToMultiByte
GetCurrentProcess
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
lstrcpynA
Sleep
ExitProcess
lstrcpyA
lstrcatA
lstrcmpA
lstrcmpiA
GetModuleFileNameA
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
GlobalFree
GetCommandLineA
GetLastError
lstrlenA
GetProcAddress
CreateThread
CloseHandle
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53e2036cc080cf51ddd2de03b274ed16

Headers

File Characteristics

Imports

wininet

user32

ws2_32

msvcrt

kernel32

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 4KB