0e028498d9e9dac6de4a1c37ef1d1ad0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0e028498d9e9dac6de4a1c37ef1d1ad0_JaffaCakes118
Size

76KB
MD5

0e028498d9e9dac6de4a1c37ef1d1ad0
SHA1

ec7cc1c159e56e3183ce33c265a62d03c4bd862c
SHA256

e9f030f3303ea0c6579f5a5bcfe57e8c24d5ea080c8937a296e4908e492fb3fa
SHA512

3a5ebf891b4f8033518e281baa8445d2058cf08ecc9943ac5d322d53b03333a4879702d63860b6768d47e4174d80aa2c0c26d6bae8d4bccfd42ddffd6691e6b7
SSDEEP

768:kaX1PYdQXU9uTXYTzwtxOxMy/Pw1dMCPxG7JRoEptKmNikvHvmGAtqUsbyplDrod:k61QdXsTXYToo4vGXzNNisAwXbkoOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e028498d9e9dac6de4a1c37ef1d1ad0_JaffaCakes118

Files

0e028498d9e9dac6de4a1c37ef1d1ad0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2a4bfd99d0831184565489fddcd25262

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
SetFileAttributesA
CopyFileA
CloseHandle
GetDiskFreeSpaceExA
FindClose
GetLastError
FindNextFileA
Sleep
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
DeleteFileA
CreateThread
GetWindowsDirectoryA
lstrcpyA
lstrcatA
FindFirstFileA
CreateDirectoryA
GetModuleHandleA
FileTimeToSystemTime
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileA
RtlUnwind
GetCommandLineA
GetVersion
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
SetStdHandle
SetEndOfFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr

user32

CreateWindowExA
KillTimer
PostQuitMessage
SetTimer
DefWindowProcA
RegisterClassA
SendMessageA
TranslateMessage
DispatchMessageA
GetMessageA

advapi32

ControlService
DeleteService
OpenSCManagerA
OpenServiceA
CloseServiceHandle

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a4bfd99d0831184565489fddcd25262

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

urlmon

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 124KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 124KB

.reloc
Size: 8KB - Virtual size: 5KB