4c7642cb61f2934caa37251cfba221f4_JaffaCakes118

General

Target

4c7642cb61f2934caa37251cfba221f4_JaffaCakes118
Size

22KB
MD5

4c7642cb61f2934caa37251cfba221f4
SHA1

87495cefd5fef2bf76dbec6a5af622ebef5f8fd3
SHA256

3e56eee1c0083b9356fba3c6b714d6dea36b9f7886c1d67d4d5b27ebd11b9961
SHA512

be4aa5fb73dafb860cc66aeffbe99eb853a6b151e1b1d9432c26a5333406bd3c15fcbacbdf94436baa62e21e0543f18f6ad5149f7ef7ab387d619939796a300e
SSDEEP

192:RPU9ABTS4QEV3kbQYVXFOd3+199j8+fEc/mhgbS7M5qYSypGVYPjKHGtrVdrQXxg:BUba0bQYVXFU08Mmh+wyPMylmORZgwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7642cb61f2934caa37251cfba221f4_JaffaCakes118

Files

4c7642cb61f2934caa37251cfba221f4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c5a0fed85816c5903c38936a5639e214

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
CloseHandle
GetFileSize
ReadFile
GetModuleFileNameA
ReadProcessMemory
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
OutputDebugStringA
CopyFileA
IsBadReadPtr
GlobalFree
GlobalLock
GlobalAlloc
Sleep
ExitProcess
VirtualProtectEx
VirtualFree
OpenEventA
VirtualAlloc

user32

GetDesktopWindow
GetDCEx
GetDC
GetCursor
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
DestroyCursor
DeleteMenu
DestroyIcon
DestroyMenu
DestroyWindow
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

gdi32

GetBkMode
DeleteObject

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5a0fed85816c5903c38936a5639e214

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 19KB - Virtual size: 19KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB