18b89f6c2df0d1031a5d0462bc3fdbcb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

18b89f6c2df0d1031a5d0462bc3fdbcb_JaffaCakes118
Size

64KB
MD5

18b89f6c2df0d1031a5d0462bc3fdbcb
SHA1

c920514531b63a6baef00d28752e698eca63b030
SHA256

49d37bc35bd3e027c638c1afbbd606675a16e66098858e79bb7aa1fd471419c5
SHA512

0349a1e231e9e404086aed7587d280c18771126429cb9ea85041fba04420b4c3756aaf35f825e43b619ac077e9437a16eb42b3ccde113da9e16c4ab8f2f2025e
SSDEEP

768:saYqpu25rV/UOf4/h/JRK915pyy/zqkobM2zvd3mvpLZAHCIzglmb1pSAyA3:aGuh/fKFUy/zqkoA2zvkpFAiIsmRpu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18b89f6c2df0d1031a5d0462bc3fdbcb_JaffaCakes118

Files

18b89f6c2df0d1031a5d0462bc3fdbcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f649d761cf7acc4e6c5d21de9ddc1919

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetConnectW
HttpOpenRequestW
InternetSetPerSiteCookieDecisionW
InternetAttemptConnect
InternetOpenW
InternetReadFile
InternetSetFilePointer
InternetClearAllPerSiteCookieDecisions
InternetOpenUrlW
InternetCloseHandle
InternetSetOptionW
InternetQueryDataAvailable

iphlpapi

GetIfTable

shlwapi

PathRemoveFileSpecW
PathMatchSpecW
PathCombineW
wvnsprintfW
StrStrIW
StrStrIA

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
VirtualAlloc
RtlUnwind
MultiByteToWideChar
WideCharToMultiByte
HeapCreate
CopyFileW
CreateThread
WaitForMultipleObjects
GetLastError
GetProcAddress
Sleep
CreateDirectoryW
FindFirstFileW
VirtualProtect
FindClose
GetTickCount
CreateProcessW
CloseHandle
DeleteFileW
SetUnhandledExceptionFilter
ExitProcess
ExpandEnvironmentStringsW
LoadLibraryW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetVersionExW
HeapAlloc
CreateWaitableTimerW
FindNextFileW
SetWaitableTimer
SystemTimeToFileTime
HeapFree
ReadFile
GetModuleFileNameW
WaitForSingleObject
GetTimeZoneInformation
CreateFileW
GetFileSizeEx
VirtualFree
GetProcessHeap
GetSystemTime
GetCurrentDirectoryW
ResumeThread
VirtualQuery
HeapReAlloc
GetFileSize
WriteFile
GetLocalTime
SetFilePointer
SetEndOfFile
GetModuleHandleW
GetCommandLineW

user32

GetWindowLongW
DispatchMessageW
GetForegroundWindow
CharLowerW
CreateWindowExW
FindWindowW
PeekMessageW
SetForegroundWindow
GetSystemMetrics
MessageBoxW
SetWindowPos
SetWindowLongW
SetParent

advapi32

RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

CoCreateInstance
OleInitialize
CoInitialize

oleaut32

SysAllocString
VariantInit
SysFreeString
VariantClear

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f649d761cf7acc4e6c5d21de9ddc1919

Headers

File Characteristics

Imports

wininet

iphlpapi

shlwapi

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 58KB - Virtual size: 58KB

.data Size: 512B - Virtual size: 93KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 58KB - Virtual size: 58KB

.data
Size: 512B - Virtual size: 93KB

.reloc
Size: 4KB - Virtual size: 3KB