33f4878a858a47c2aa7c045bf72c611f_JaffaCakes118

General

Target

33f4878a858a47c2aa7c045bf72c611f_JaffaCakes118
Size

25KB
MD5

33f4878a858a47c2aa7c045bf72c611f
SHA1

4680967dd5ef9a60cbc0d74e91b582f2d2e3d926
SHA256

300eb42f34c58abc2d2307423cbc909f43b626a12de3bb9ad4314f47efd83b89
SHA512

ee7e5a2803c66d6be421c3d1fabc0a6cab733be1c1c778328b934b83b4cf57c0535ff8faa11ca1f342875398c4668f62daa22aa07859f96aafa7f545e7194de0
SSDEEP

192:6QuNZb2EKeGZwvjztw1W2MXOb0OsIZlWun/1dplPaggjNEZLj09eRJHhXoJ:2qU5XlXc0KWSbpIOOkRJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33f4878a858a47c2aa7c045bf72c611f_JaffaCakes118

Files

33f4878a858a47c2aa7c045bf72c611f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

db51607ea57d4fd331e6a10226796bc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateMutexA
OpenProcess
GetCurrentProcessId
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
GetProcAddress
GetModuleHandleA
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
lstrcmpA
FindFirstFileA
VirtualProtectEx
LoadLibraryA
Module32Next
CreateToolhelp32Snapshot
ReadFile
GetModuleFileNameA
ReleaseMutex
WinExec
TerminateProcess
CreateThread
Sleep
GetCurrentProcess
Thread32Next
TerminateThread
GetThreadPriority
OpenThread
Thread32First
IsBadReadPtr
Process32First
lstrcmpiA
Process32Next
lstrlenA
CreateFileA
WriteFile
CloseHandle
GetTempPathA
GetSystemDirectoryA
Module32First

user32

GetWindowThreadProcessId
EnumWindows
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

shlwapi

StrStrIA

wininet

InternetCloseHandle

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
strcmp
_purecall
isprint
strstr
strncat
strcat
memset
strcpy
sprintf
_itoa

Sections

.bss
Size: - Virtual size: 9.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db51607ea57d4fd331e6a10226796bc4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

wininet

msvcrt

Sections

.bss Size: - Virtual size: 9.0MB

.data Size: 15KB - Virtual size: 15KB

.reloc Size: 9KB - Virtual size: 8KB

.bss
Size: - Virtual size: 9.0MB

.data
Size: 15KB - Virtual size: 15KB

.reloc
Size: 9KB - Virtual size: 8KB