462567aabdbbcd30e61f622eadd53879_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

462567aabdbbcd30e61f622eadd53879_JaffaCakes118
Size

23KB
MD5

462567aabdbbcd30e61f622eadd53879
SHA1

4c1a560b2df1faabc252d94c591e8bad49ccb319
SHA256

4851a79fd806faa03d7aa90fbb00bdf88d2a6247f709210baa7c0d88afc72d1a
SHA512

821edd4ee49005d9b87e69003c83096bd9a79ee09978083310ef69319c11147f96830f16406d9b0676d9bcba49ea7cdd7952754a2fa0b32742a037f190ecf20c
SSDEEP

384:7OU3xbRuRI7UtPuo/cuvsjwnEKWRrmr8BzWR8a1O86mZ6DO:7tyPuoEuREBRrM8/TL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
462567aabdbbcd30e61f622eadd53879_JaffaCakes118

Files

462567aabdbbcd30e61f622eadd53879_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9c4954830c9fa0cb4155c1ded22fc1d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

inet_addr
gethostbyname
recv
closesocket
inet_ntoa
WSAStartup
ioctlsocket
htons
socket
connect
WSACleanup
send

user32

GetClassNameA
GetWindowTextA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
VkKeyScanA
keybd_event
wsprintfA
BlockInput
SetForegroundWindow
SetFocus
ShowWindow

advapi32

OpenProcessToken
ImpersonateLoggedOnUser
EnumServicesStatusA
OpenSCManagerA
CloseServiceHandle

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantInit
SysAllocString
VariantClear
SysFreeString

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameA

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
free
atoi
strtok
fopen
fwrite
fclose
time
malloc
strncpy
srand
rand
__CxxFrameHandler
??2@YAPAXI@Z
strcmp
strstr
memcpy
toupper
strlen
strcpy
sprintf
memset
strcat
??3@YAXPAX@Z

kernel32

CreateThread
CreateProcessA
LoadLibraryA
GetProcAddress
lstrlenA
lstrcpyA
lstrcmpA
lstrcpynA
GetLastError
GetLocaleInfoA
OpenProcess
lstrcmpiA
Sleep
GetTickCount
InterlockedDecrement
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
CreateMutexA
DisableThreadLibraryCalls
MultiByteToWideChar
CloseHandle

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c4954830c9fa0cb4155c1ded22fc1d1

Headers

File Characteristics

Imports

wsock32

user32

advapi32

wininet

ole32

oleaut32

psapi

msvcrt

kernel32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB