34a6c9ea61e6b1c60e2c4ac8f6558185_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

34a6c9ea61e6b1c60e2c4ac8f6558185_JaffaCakes118
Size

72KB
MD5

34a6c9ea61e6b1c60e2c4ac8f6558185
SHA1

1144cb83719038fc199cb1accfe406460c2088f7
SHA256

94829e5f0a79fc553628325fcd4766b0dedc2ff4deee450ba0ed286c538a36ad
SHA512

c40d5557774ea5cd37523486faf4a676637290b90cd4a6f27ff9733d019e484d156debe37bc2d5cb1ba2d440578aa35bc7361899fabd985548de495bf7bf9635
SSDEEP

1536:mpWxHdUbt0jQ60EvWlOtgYtkecpMmFXKB7M61yTDA/:qY9MOQ9EQxomFRTDA/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34a6c9ea61e6b1c60e2c4ac8f6558185_JaffaCakes118

Files

34a6c9ea61e6b1c60e2c4ac8f6558185_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8d5f4a44b8201687f6fe6b484cef701

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
TerminateThread
HeapReAlloc
HeapSize
Sleep
CloseHandle
ReadProcessMemory
OpenProcess
ExitProcess
GetProcAddress
LoadLibraryA
ExitThread
GetSystemTime
GetComputerNameA
WriteFile
ReadFile
GetFileSize
SetFileAttributesA
GetFileAttributesA
CreateMutexA
OpenMutexA
LockResource
LoadResource
FindResourceExA
DeleteFileA
CreateProcessA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
CreateThread
GetLastError
HeapFree
GetProcessHeap
CreateFileA
HeapAlloc
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
VirtualQuery
InterlockedExchange
SetFilePointer
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte

user32

GetWindowThreadProcessId
FindWindowA

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
GetUserNameA

shell32

SHGetFolderPathA

ws2_32

closesocket
send
recv
connect
socket
shutdown
htons
inet_addr
WSACleanup
WSAStartup
WSAGetLastError
select

wininet

HttpAddRequestHeadersA
InternetSetCookieA
HttpSendRequestA
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetWriteFile
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
HttpEndRequestA
HttpSendRequestExA
InternetAttemptConnect

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8d5f4a44b8201687f6fe6b484cef701

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

wininet

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 136B

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 136B