43bbc093536dd5dd632808a43803fef6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

43bbc093536dd5dd632808a43803fef6_JaffaCakes118
Size

84KB
MD5

43bbc093536dd5dd632808a43803fef6
SHA1

b666346dc9308a65e2c54b599a316fc3c2cd750b
SHA256

824788de252b78db18337186a34493e9595868e7bf79edfa474c18f7562e0b29
SHA512

81fe5b430036b040c3f5311788d5144324caa95c76a1073114ef4009a21208331b5e53eba95bc86e1ecd81fbafa9d522b290eadb462680b6f3abf09c34ef52ba
SSDEEP

1536:ed6RL2mD1vO4HxioMBBCNDcRwMIIGe13JOOTV+Z5QwTl:tNxmhBBCNoO/O13J1STl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43bbc093536dd5dd632808a43803fef6_JaffaCakes118

Files

43bbc093536dd5dd632808a43803fef6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e49d5cc468fee38ba59bcb98e02cd02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadImageA
GetMonitorInfoA
GetKeyboardType
GetDoubleClickTime
GetSysColorBrush
GetSysColor

advapi32

RegSetValueExA
RegCreateKeyExA
RegEnumValueA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegQueryValueExA
RegOpenKeyExA
RegGetKeySecurity
RegCloseKey

psapi

GetModuleInformation

ws2_32

htonl
WSAStartup

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

netapi32

NetUserGetInfo
NetApiBufferFree

kernel32

GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetFileAttributesA
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
SetFilePointer
VirtualAlloc
VirtualQuery
InterlockedExchange
LoadLibraryA
IsBadCodePtr
IsBadWritePtr
GetVolumeInformationA
GetProcessPriorityBoost
CreateDirectoryA
GetFileType
GetTickCount
SetErrorMode
GetFileTime
OpenProcess
GetSystemDirectoryA
GetVersion
GetFirmwareEnvironmentVariableA
Sleep
GetStdHandle
GetCommandLineA
GetCurrentProcess
CloseHandle
GetLocalTime
OpenMutexA
CreateMutexA
GetEnvironmentVariableA
GetDriveTypeA
GetLogicalDriveStringsA
ExitProcess
GetShortPathNameA
GetLastError
CreateProcessA
CreateFileA
CreateThread
MultiByteToWideChar
GetModuleFileNameA
SetEnvironmentVariableA
CopyFileA
WriteFile
RtlUnwind
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5e49d5cc468fee38ba59bcb98e02cd02

Headers

File Characteristics

Imports

user32

advapi32

psapi

ws2_32

wininet

netapi32

kernel32

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 31KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 31KB