30d07c8c45f93d85da19370b58f478e7_JaffaCakes118

General

Target

30d07c8c45f93d85da19370b58f478e7_JaffaCakes118
Size

19KB
MD5

30d07c8c45f93d85da19370b58f478e7
SHA1

bc2089ab9982df66f5e0952554a31d27ecf7e539
SHA256

7b107b7c6d3ebf0e310b012d7cdbe774044b5e2b64adf17485480578f250d328
SHA512

8937462f6bb2be67e652be3ad617dde84fe33bcce3f1812e57c03b1ad09a29c3b0d3f9e41c98e88bcecb6b3e007482866ca7d5acaf8a286698211cbbe8fa6d2e
SSDEEP

192:r6n8wkSP/skaU00UHtme7iNAqXML5MozNPBrJXGkKIDBpImS1IStMDb:rq8w9kkU8e7UAJMeNPBrJ2rK+1ISuDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30d07c8c45f93d85da19370b58f478e7_JaffaCakes118

Files

30d07c8c45f93d85da19370b58f478e7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

075f9b3e0f73178ba123df9e6ba96864

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualAllocEx
ReadProcessMemory
GetCurrentProcess
OutputDebugStringA
CreateEventA
SetThreadPriority
CreateThread
GlobalLock
GlobalAlloc
IsBadReadPtr
GetCurrentProcessId
WriteProcessMemory
VirtualAlloc
VirtualFreeEx
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
VirtualProtectEx

user32

GetKeyState
EnumChildWindows
SendMessageA
GetForegroundWindow
GetClassNameA
IsWindowEnabled
IsWindowVisible
FindWindowExA
FindWindowA
GetWindowThreadProcessId
GetWindowTextA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetKeyboardState
MapVirtualKeyA
ToAscii
GetClientRect
ClientToScreen
GetDC
ReleaseDC
wsprintfA
GetInputState
GetMessageA
PostThreadMessageA

gdi32

GetPixel

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

075f9b3e0f73178ba123df9e6ba96864

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 16KB - Virtual size: 16KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1KB - Virtual size: 1KB