4a1190330ba922b7d188bc3cd29e4087_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4a1190330ba922b7d188bc3cd29e4087_JaffaCakes118
Size

15KB
MD5

4a1190330ba922b7d188bc3cd29e4087
SHA1

5314136bb1ea1477de3fb184d8665e833f720cae
SHA256

576990189e6dfca1d58e8704ff919e99a295351712fb99f675059436dc2f24dc
SHA512

ff59425fbdd6670f78b7d38876e5b7930d52eacf3e3501ab5da9dabc7c6ad9bdff961c32f35ec6029100aadb731e717f0d3a7a0ad6bc303fd035be7170381b54
SSDEEP

192:drHiUGn6+TtafC7ZqZ5t1ptBu7f6gkFT4Qw5c5+zBK3+mBA5O:Z0PwIZotK6gkI4+zB0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a1190330ba922b7d188bc3cd29e4087_JaffaCakes118

Files

4a1190330ba922b7d188bc3cd29e4087_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddd3071d0669ce17826fb3fd8efa1e37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegEnumValueA
RegOpenKeyExA

kernel32

AddAtomA
CloseHandle
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetComputerNameA
GetCurrentProcess
GetExitCodeProcess
GetFileAttributesA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
OpenProcess
SetUnhandledExceptionFilter
Sleep
TerminateProcess

msvcrt

_strcmpi
_strlwr
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_findclose
_findfirst
_findnext
_fullpath
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fgets
fopen
fprintf
fputs
free
getenv
malloc
memset
signal
sprintf
strcat
strcpy
strlen
strncat
strncmp
strtok

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetForegroundWindow
GetMessageA
GetWindowTextA
GetWindowThreadProcessId
KillTimer
LoadCursorA
LoadIconA
PostMessageA
RegisterClassExA
SetTimer
ShowWindow
TranslateMessage

wininet

InternetAttemptConnect
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ddd3071d0669ce17826fb3fd8efa1e37

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

wininet

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 80B

.rdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 208B

.idata Size: 3KB - Virtual size: 2KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 80B

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 208B

.idata
Size: 3KB - Virtual size: 2KB