260861800f5e828d4595926e8a0658bb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

260861800f5e828d4595926e8a0658bb_JaffaCakes118
Size

24KB
MD5

260861800f5e828d4595926e8a0658bb
SHA1

cf895fb5dc942168773b280f2da91c7f13f121a6
SHA256

9287b67316164795edcb706e5cc73bc0e73f03ade614937185057a755adef240
SHA512

0ca1e9c27f5e20e5e993e02b74b207b28c9da55c41593e695846a4246bf1078823188dba3faf6ca82f378338554e0ca318e081d006b0a10abc9c02b6d7b6f58a
SSDEEP

384:1PTCVgdPuyIvTS/ftF3/hThjS2tuThjS2txQChtnym4+jS1a0WQ+W:17siPuyIbqVF3/tNS2tSNS2txQQYm4Fn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
260861800f5e828d4595926e8a0658bb_JaffaCakes118

Files

260861800f5e828d4595926e8a0658bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac358a94a0c104823f1c3b9a0c55d40c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetLastError
CreateMutexA
GetTempPathA
GetSystemDirectoryA
Sleep
DeleteFileA
WaitForSingleObject
lstrcatA
GetLocalTime
GetCurrentProcess
WinExec
GetModuleFileNameA
OutputDebugStringA

user32

GetWindowLongA
FindWindowA
ShowWindow

urlmon

URLDownloadToCacheFileA
URLDownloadToFileA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shell32

ShellExecuteA

msvcrt

strchr
_onexit
__dllonexit
fseek
ftell
strcmp
fopen
fwrite
fclose
fread
atoi
__CxxFrameHandler
strrchr
_stricmp
memcpy
memset
malloc
strlen
strcpy
sprintf
strcat

Sections

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ac358a94a0c104823f1c3b9a0c55d40c

Headers

File Characteristics

Imports

kernel32

user32

urlmon

advapi32

wininet

msvcp60

shell32

msvcrt

Sections

.data Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 8B

.data
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 8B