2266c230cc482c7222d501bd660a4878_JaffaCakes118

General

Target

2266c230cc482c7222d501bd660a4878_JaffaCakes118
Size

21KB
MD5

2266c230cc482c7222d501bd660a4878
SHA1

29adbb4c855f39fb628742874cb5a8b6780d8888
SHA256

de8fdfe48b3db12e4d2a47474fae94e61cf3bb67dc3cf505bd2ded0c8d45ee84
SHA512

2fefa7cd19ffe6c1bc360b1f2ce91cf658bbb6a0d3bdd790c988b4759179cc308d3492a42700e9facc1b1765c25347aa9eb8a7b0ef33abc6ab7ac45cb1be3908
SSDEEP

384:VO33xuy30gMTQEPFJD6kwU+k2V6IQu426tnw8JU43J:V0Y/UmFskPoaucnNJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2266c230cc482c7222d501bd660a4878_JaffaCakes118

Files

2266c230cc482c7222d501bd660a4878_JaffaCakes118
.dll windows:4 windows x86 arch:x86

41624a3ac412880d82c27b5ec224a948

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
GetFileSize
GlobalFree
VirtualProtectEx
ReadProcessMemory
GetCurrentProcess
SetThreadPriority
IsBadReadPtr
GlobalUnlock
VirtualAlloc
VirtualFree
ExitProcess
Thread32Next
TerminateThread
GetThreadPriority
Thread32First
GetWindowsDirectoryA
GetCurrentProcessId
GetPrivateProfileStringA
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
ReadFile
CloseHandle

user32

UnhookWindowsHookEx
wsprintfA
GetMessageA
PostThreadMessageA
SetWindowsHookExA
CallNextHookEx
GetInputState

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41624a3ac412880d82c27b5ec224a948

Headers

File Characteristics

Imports

kernel32

user32

wininet

advapi32

Sections

.text Size: 18KB - Virtual size: 17KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 17KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB