32854f7d75d25de0b736685c02385604_JaffaCakes118

General

Target

32854f7d75d25de0b736685c02385604_JaffaCakes118
Size

19KB
MD5

32854f7d75d25de0b736685c02385604
SHA1

f2e770f9a9cb2c5a0b837baf6dc7434efb244acb
SHA256

77e36965820cb510761c03afd18aa3ac881b8e63e775657696647650adf2e6ed
SHA512

2d6c2c9f72c22b50ba7cb50a4f893b4fb1f7d090e465667b45c252f629a15c0ed6b27ab20a9bf0cba783c486e75d0ed2e73276f370870de8ab62f689489d39ae
SSDEEP

192:ezTVZZN5otvN0jjd7JQxuMfc9uBBQ6PRQkYOK8p6dx/ycGX3sT0:o/nmNaxaxzc9uBBQARQkYOWb/yTX3o0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32854f7d75d25de0b736685c02385604_JaffaCakes118

Files

32854f7d75d25de0b736685c02385604_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5feefb4d2f116a567c9096f3d50c5801

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

ntdll

strcpy
strlen
RtlZeroMemory
memcmp
memcpy

kernel32

VirtualProtectEx
LoadLibraryA
GetProcAddress
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
CloseHandle
CreateFileA
CreateThread
GetCurrentProcess
GetCurrentProcessId
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalFree
ReadFile
ReadProcessMemory
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WriteProcessMemory
VirtualQueryEx

user32

GetWindowThreadProcessId
KillTimer
SetTimer
SetWindowLongA
SetWindowsHookExA
UnhookWindowsHookEx
GetWindowLongA
GetWindowTextA
EnumWindows
wsprintfA
CallNextHookEx
CallWindowProcA

ws2_32

send

Exports

Exports

ServiceRoute
StartService
StopService

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5feefb4d2f116a567c9096f3d50c5801

Headers

File Characteristics

Imports

wininet

ntdll

kernel32

user32

ws2_32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bss Size: - Virtual size: 4B

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 554B

.text
Size: 8KB - Virtual size: 7KB

.bss
Size: - Virtual size: 4B

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 554B