15da978b13469f9d3d4f275b90743738_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15da978b13469f9d3d4f275b90743738_JaffaCakes118
Size

27KB
MD5

15da978b13469f9d3d4f275b90743738
SHA1

a766a56aab11471d18687b62ec99884cd5b87806
SHA256

237d60f790791068cf78ad0477ad174ce5010c37a885bbcc336ccc64193cb71d
SHA512

ad90c4986292259a04f17837e1d2f00efad68f0bc7e9decb76199066576a2628d2022c1b9d876e3c16a3c19b7b783a670ed4fd5467cce68d3c2569d942839603
SSDEEP

768:NBEJv4JUz+KYOMNZq3o1iADyfTYsGHCfyXG:Nyv0k+bOzMnytGHCKXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15da978b13469f9d3d4f275b90743738_JaffaCakes118

Files

15da978b13469f9d3d4f275b90743738_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5fc14731d155a99756e0d4c13842bff6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateThread
TerminateThread
IsBadReadPtr
GetCommandLineA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateMutexA
GetCurrentProcessId
VirtualAlloc
GetPrivateProfileStringA
ExitProcess
GetCurrentThread
GetModuleFileNameA
VirtualProtectEx
ReadFile
InitializeCriticalSection
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
SetThreadContext
OpenThread
SetUnhandledExceptionFilter
OpenProcess
WriteProcessMemory
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
GetTempPathA
LoadLibraryA
GetProcAddress
ReadProcessMemory
VirtualProtect
GetModuleHandleA
GetCurrentProcess
TerminateProcess
CreateFileA
WriteFile
CloseHandle
GetCurrentThreadId
Sleep

user32

GetWindowTextA
CallNextHookEx
GetWindowThreadProcessId
FindWindowA
GetForegroundWindow
SetWindowsHookExA
UnhookWindowsHookEx

wininet

InternetReadFile
InternetCloseHandle

ws2_32

closesocket

msvcrt

free
_initterm
malloc
_adjust_fdiv
_strlwr
_strupr
_stricmp
fopen
fread
fclose
strcpy
sprintf
strlen
memcpy
memset
strcat
??2@YAPAXI@Z
strrchr
atoi
strcmp
wcslen
strstr

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fc14731d155a99756e0d4c13842bff6

Headers

File Characteristics

Imports

kernel32

user32

wininet

ws2_32

msvcrt

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 3KB

sdt Size: 512B - Virtual size: 4B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 3KB

sdt
Size: 512B - Virtual size: 4B

.reloc
Size: 2KB - Virtual size: 2KB