42f01b8aced0c46942927147506299ef_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42f01b8aced0c46942927147506299ef_JaffaCakes118
Size

84KB
MD5

42f01b8aced0c46942927147506299ef
SHA1

402a91e7ad0026da4db437482fa4e823d432aeab
SHA256

3b8490b22815ae8ee6a38dda3ec72673608d9736b97bf4e5ab4eeb9595404839
SHA512

09e33aabb8841264f71c1e69c4df48f3731da42aac2c39a091cbc5ae8b4f922627cf77dfa818cbe51d63fbc26d94a78625ae70290e6989197d11075f28c0888b
SSDEEP

768:U9SGlkMbTgHJbglwMi9Xb3UzXbAONTFDF5VFcVayBu+VuH+vFtsAHx7r2u:uVkM3gpbgOMi9Xo4O5vSVN5tscX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f01b8aced0c46942927147506299ef_JaffaCakes118

Files

42f01b8aced0c46942927147506299ef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5a42aeff5751c90fa97d4473542f4151

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup

kernel32

GetTempPathA
WinExec
Sleep
CreateMutexA
GetModuleFileNameA
GetSystemTimeAsFileTime
GetLastError
WideCharToMultiByte
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
MultiByteToWideChar
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
CloseHandle
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
VirtualAlloc
HeapReAlloc
CreateFileA
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
HeapSize

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerA

urlmon

URLDownloadToFileA

Exports

Exports

ServiceMain

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a42aeff5751c90fa97d4473542f4151

Headers

File Characteristics

Imports

ws2_32

kernel32

advapi32

urlmon

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 8KB - Virtual size: 5KB