3a7f673f4a9d9496c94fab19cb8d7b30_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3a7f673f4a9d9496c94fab19cb8d7b30_JaffaCakes118
Size

68KB
MD5

3a7f673f4a9d9496c94fab19cb8d7b30
SHA1

e3a1546db51ffce11a0788499bce0a13803a1f12
SHA256

9ebac1789980f28cdfb0e889734844358274b4b7e5cc2e8d4622e42a98184b42
SHA512

338b787a259eddeca47e76ac5e9ddbd6aff412fe64deab50b72d4cf651efbbbbdc251e33893978b9d3eb0fb358832a8b74f737bf2eafed13a26e4485a7da922d
SSDEEP

1536:nZavIdhH3j9NN1KPR/KErmkPrzMe3+M1gwZMi3DI37j:nZavIdJlYp/KE6sPMe35r3DI37j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a7f673f4a9d9496c94fab19cb8d7b30_JaffaCakes118

Files

3a7f673f4a9d9496c94fab19cb8d7b30_JaffaCakes118
.dll windows:4 windows x86 arch:x86

564bffdb41cdb60d1f33cc7549d88270

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileA
lstrcatA
GetTempPathA
WriteFile
lstrlenA
lstrcpynA
GetTempFileNameA
lstrcpyA
DeleteFileA
GetFileSize
Sleep
lstrcmpA
InitializeCriticalSection
ExitThread
GetLastError
HeapReAlloc
HeapAlloc
CloseHandle
HeapFree
HeapCreate
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetLocalTime
GetExitCodeThread
TerminateThread
WaitForSingleObject
GetVersionExA
FreeLibraryAndExitThread
GetModuleHandleA
GlobalAlloc
CreateProcessA
GlobalFree
HeapDestroy
CreateThread
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
VirtualAlloc
VirtualFree
WideCharToMultiByte
GetStdHandle
GetCPInfo
ExitProcess
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
InterlockedExchange
VirtualQuery
SetLastError
GetProcAddress
TerminateProcess
GetCurrentProcess
LoadLibraryA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

urlmon

URLDownloadToFileA

iphlpapi

GetNetworkParams
GetBestInterface
GetAdaptersInfo

ws2_32

ntohs
ntohl
inet_addr
sendto
recvfrom
WSAGetLastError
htons
WSACleanup
connect
send
select
__WSAFDIsSet
recv
shutdown
socket
closesocket
WSAStartup
gethostbyname
setsockopt

winmm

timeGetTime

Exports

Exports

InitModule

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

564bffdb41cdb60d1f33cc7549d88270

Headers

File Characteristics

Imports

kernel32

user32

advapi32

urlmon

iphlpapi

ws2_32

winmm

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 50KB

.data Size: 4KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 50KB

.data
Size: 4KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 4KB