14c05878a7e358abb33288ea93a385aa_JaffaCakes118

General

Target

14c05878a7e358abb33288ea93a385aa_JaffaCakes118
Size

35KB
MD5

14c05878a7e358abb33288ea93a385aa
SHA1

80d92bb427d672b08cb5cc1726f6d8ed178c1f40
SHA256

f8421d41214c810ca4ee20672516c7e8227c6ccdbd33140e01e4a51803df9223
SHA512

6e45a900e2665c4f461a38cf6004a4208178cda862fd52ab283b470d08db275d71968e49c74bd05b4c312ee2fbdf2dae35152b815ab9737395faa2ea3e8b4410
SSDEEP

768:ATiw1KHVO2EZj4eC0tB7U3eEMP8uaUuQFgi8t1ioCePa2:ATDiEFceCSKuKQFgiIMeC2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c05878a7e358abb33288ea93a385aa_JaffaCakes118

Files

14c05878a7e358abb33288ea93a385aa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

662b9aec57e44443ec6d7e167fdc90e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA

user32

SetWindowLongA
GetWindowLongA
GetWindowThreadProcessId
GetWindowTextA
EnumWindows
GetParent
CallWindowProcA
EnumChildWindows
SetWindowTextA
wsprintfA

ws2_32

send
connect
socket
htons
inet_addr
closesocket
inet_ntoa
recv
select

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
isalpha
free
_initterm
malloc
_adjust_fdiv
isalnum
memcpy
memset
memcmp
sscanf

kernel32

GetCommandLineA
GetExitCodeThread
TerminateThread
GetCurrentDirectoryA
GetCurrentProcessId
IsBadReadPtr
GetPrivateProfileStringA
lstrlenW
WideCharToMultiByte
GetCurrentProcess
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
lstrcpynA
Sleep
ExitProcess
lstrcpyA
lstrcatA
lstrcmpA
lstrcmpiA
GetModuleFileNameA
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
GlobalFree
GetLastError
SetLastError
lstrlenA
GetProcAddress
CreateThread
CloseHandle
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

662b9aec57e44443ec6d7e167fdc90e7

Headers

File Characteristics

Imports

wininet

user32

ws2_32

msvcrt

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 19KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 19KB

.reloc
Size: 3KB - Virtual size: 3KB