458dd7c69bcfd13d1b730cf905949bbc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

458dd7c69bcfd13d1b730cf905949bbc_JaffaCakes118
Size

26KB
MD5

458dd7c69bcfd13d1b730cf905949bbc
SHA1

861db0a0090755f3fb7783fe23806e38e1b35262
SHA256

a518e941a1a34393934afc65f1785ee47a3df75ef824919a711855c7bd680337
SHA512

a077edd2e4c38e4586b2f68c8f15bb9b2dece918edcb5bfa17e9d929f06fc96e2b883329fc22ccfa899b12fe262b7f3c02d619180175cf6bb4bfcdec4b0c5399
SSDEEP

768:LPAowzFdyR7wayfQzn5cY/5bpzrc9+D2:LoPgj92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
458dd7c69bcfd13d1b730cf905949bbc_JaffaCakes118

Files

458dd7c69bcfd13d1b730cf905949bbc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2ddde4003c121390fac7d47142370bae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadProcessMemory
GetCurrentProcess
GlobalLock
GlobalAlloc
GetModuleHandleA
CreateThread
GetCurrentThreadId
GlobalFree
GlobalUnlock
TerminateThread
RaiseException
CloseHandle
GetCurrentThread
LoadLibraryA
Process32Next
Process32First
GetProcAddress
InitializeCriticalSection
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
SetThreadContext
OpenThread
SetUnhandledExceptionFilter
GetModuleFileNameA
VirtualProtectEx
WriteProcessMemory
ResumeThread
ExitProcess
OpenProcess
TerminateProcess
GetTickCount
Sleep
IsBadReadPtr
GetCurrentProcessId
OpenMutexA
CreateMutexA
CreateToolhelp32Snapshot

user32

SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetKeyState
GetWindowThreadProcessId
FindWindowA
GetWindowTextA
GetForegroundWindow

imagehlp

ImageUnload
ImageLoad

shlwapi

PathFileExistsA

msvcrt

??3@YAXPAX@Z
_stricmp
_adjust_fdiv
malloc
_initterm
free
wcslen
fopen
fread
fclose
strstr
sscanf
_strlwr
strcat
sprintf
strcpy
strlen
memset
rand
srand
memcpy
strrchr
strncpy
??2@YAPAXI@Z

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ddde4003c121390fac7d47142370bae

Headers

File Characteristics

Imports

kernel32

user32

imagehlp

shlwapi

msvcrt

wininet

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 5KB

sdata Size: 512B - Virtual size: 224B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 5KB

sdata
Size: 512B - Virtual size: 224B

.reloc
Size: 3KB - Virtual size: 2KB