0f3f9eed315baa9063d840958e4b1f55_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f3f9eed315baa9063d840958e4b1f55_JaffaCakes118
Size

20KB
MD5

0f3f9eed315baa9063d840958e4b1f55
SHA1

c49ac526ca5616c65169faa46c0e000644a26d9a
SHA256

d9f22d00650b77123cb1bc14d6c1336869405a273bbbf038339914bd7d0cd3f7
SHA512

4ee390b7a23a11b1fcc27c8708282e3269783fc6cfdc413bbb6e901698e721474aa9900099e85e2fb07e71a0fce93094eb32a5ee910268e4e56c3a4ecea67767
SSDEEP

384:EB1Ga3nANvHQ8RmWcvZEe+PRZpy2dqLY:g3nIlRJZphg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3f9eed315baa9063d840958e4b1f55_JaffaCakes118

Files

0f3f9eed315baa9063d840958e4b1f55_JaffaCakes118
.dll windows:4 windows x86 arch:x86

69c4eaf2743335dccce228624aeb5ab2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

htons
inet_addr
gethostbyname
recv
inet_ntoa
WSAStartup
ioctlsocket
send
socket
connect
WSACleanup
closesocket

user32

SetClipboardData
CloseClipboard
keybd_event
VkKeyScanA
SetFocus
EmptyClipboard
OpenClipboard
SetForegroundWindow
wsprintfA
BlockInput
ShowWindow

advapi32

EnumServicesStatusA
CloseServiceHandle
OpenProcessToken
ImpersonateLoggedOnUser
OpenSCManagerA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

fopen
_onexit
__dllonexit
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
rand
srand
strncpy
strstr
malloc
time
fclose
fwrite
strtok
atoi
free
_initterm
_adjust_fdiv

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit

psapi

GetModuleBaseNameA
EnumProcessModules
EnumProcesses

kernel32

GetLocaleInfoA
CreateThread
CreateProcessA
LoadLibraryA
GetProcAddress
lstrcpyA
lstrlenA
lstrcmpA
lstrcpynA
CreateMutexA
GlobalUnlock
OpenProcess
lstrcmpiA
Sleep
GetTickCount
InterlockedDecrement
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
DisableThreadLibraryCalls
MultiByteToWideChar
GetLastError
CloseHandle

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69c4eaf2743335dccce228624aeb5ab2

Headers

File Characteristics

Imports

wsock32

user32

advapi32

wininet

msvcrt

ole32

oleaut32

psapi

kernel32

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 790B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 790B