30aba9f78740bb4d5737875ac8190109_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

30aba9f78740bb4d5737875ac8190109_JaffaCakes118
Size

21KB
MD5

30aba9f78740bb4d5737875ac8190109
SHA1

554fc51a53673ad3a29d0c267c24782446bcec3e
SHA256

13a509ba9973763ccf34a79c7f812867c513af60b2fcc03bd10932b04dc80ce0
SHA512

fe7312f82fb1522e8e9c9e93f1887d60882224bd1adb9b711b8752ef82a52d9cc1a90070371d04bf7185f1090b6894d9feea6f345f21d1c7c3c9a5e300186d87
SSDEEP

384:fhNFq2w0TVENgTdsviyU2ml611K+OiZi5B9D1O3jWBXitKy9YG4gdk:f0KVEmImg7tknO38XiTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30aba9f78740bb4d5737875ac8190109_JaffaCakes118

Files

30aba9f78740bb4d5737875ac8190109_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03344e629ee8952f97b20697de2b9b06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??3@YAXPAX@Z
_CxxThrowException
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fprintf
strtol
calloc
malloc
srand
strchr
strncmp
memmove
strstr
strncpy
rand
sprintf
strcat
memset
strtok
strcmp
_snprintf
strlen
fopen
fwrite
fclose
strcpy
??1type_info@@UAE@XZ

ws2_32

select
WSAStartup
WSACleanup
recv
gethostbyname
inet_addr
getsockname
socket
connect
send
closesocket
htons

shell32

ShellExecuteA

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA

kernel32

CreateFileA
WriteFile
CreateProcessA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetDriveTypeA
ExitThread
GetLastError
ExitProcess
GetCommandLineA
lstrcmpiA
GetWindowsDirectoryA
GetTickCount
GlobalUnlock
GetTempFileNameA
ExpandEnvironmentStringsA
CopyFileA
SetFileAttributesA
Sleep
CreateMutexA
GlobalLock
GlobalAlloc
GetVersionExA
GetLocaleInfoA
TerminateThread
WaitForSingleObject
CreateThread
GetLogicalDriveStringsA
GetStartupInfoA
GetFileAttributesA
LocalFree

user32

RegisterClassExA
MessageBoxA
ShowWindow
VkKeyScanA
keybd_event
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
IsWindow
SetFocus
SetForegroundWindow
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
RegisterDeviceNotificationA
CreateWindowExA

shlwapi

PathRemoveFileSpecA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantInit
SysAllocString
VariantClear

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

03344e629ee8952f97b20697de2b9b06

Headers

File Characteristics

Imports

msvcrt

ws2_32

shell32

advapi32

wininet

kernel32

user32

shlwapi

ole32

oleaut32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 7KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 7KB