5d0ff601bdca7442545661e4b613b72d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5d0ff601bdca7442545661e4b613b72d_JaffaCakes118
Size

28KB
MD5

5d0ff601bdca7442545661e4b613b72d
SHA1

615254e305fba6067fb1c87fad270815acad54f8
SHA256

29ff6a1a6380659b4de896df8b96dc2a1fa921d16228ab1006d7672a1cbf3f14
SHA512

51ee461b08a932d82531dd32e391babfb4c68bf408160bd51ae16c81fa94553def7227879e1135fc5d5c268a85d6669db4625255e16e195c5ba8ca4966f29cc5
SSDEEP

192:ORKH3qhLSeJcsnWxRgbWiRAjPLCCqYUhBVlrYRQSE3OF:tH3qheeJcsWxdiRAjPLCnSEeF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d0ff601bdca7442545661e4b613b72d_JaffaCakes118

Files

5d0ff601bdca7442545661e4b613b72d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

43185f5133de83a81af2897aac960721

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA

ole32

CoInitialize

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA

kernel32

OutputDebugStringA
GetSystemDirectoryA
GetTempPathA
CopyFileA
Sleep
GlobalFindAtomA
OpenMutexA
GlobalAddAtomA
CreateMutexA
CreateThread
GetModuleFileNameA
GetCurrentProcess

urlmon

URLDownloadToFileA

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

fseek
_adjust_fdiv
_initterm
??2@YAPAXI@Z
sprintf
strcpy
strchr
free
malloc
memcpy
strcat
strrchr
strlen
memset
fclose
strcmp
ftell
fread
fopen
__CxxFrameHandler
_EH_prolog
atoi
fwrite

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43185f5133de83a81af2897aac960721

Headers

File Characteristics

Imports

shell32

ole32

wininet

kernel32

urlmon

msvcp60

msvcrt

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 740B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 740B