69084aa51448a10895aad0efde9b25e2_JaffaCakes118

General

Target

69084aa51448a10895aad0efde9b25e2_JaffaCakes118
Size

8KB
MD5

69084aa51448a10895aad0efde9b25e2
SHA1

006650bc25175d9d80f92649d50dc7c1a93e7f3d
SHA256

c53f7de7f8ab9d4c4d5dc661b8c3ec7d7a734e3df33fc358e0cb2b267265f86e
SHA512

f9a68cfc4b4a6e557a5f3b1f3925d2e3c154fee18d8488f51f3b69cd215329e3f0556fd52d820224573994b881d3c950110ae5e22f10526d3bf7ee6be12b0ac0
SSDEEP

96:4FQv+VOOPRY20jcJbvrWHHrBG9QaledowHO4mCNeAaojwzWqgpkYLZtgcrKIBFes:D+f0jeCHjaY7u4mC5WgphZacY9Bb0f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69084aa51448a10895aad0efde9b25e2_JaffaCakes118

Files

69084aa51448a10895aad0efde9b25e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7a47454cc3eb52ad593a7c83483bac1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wmsro32

UninstallHook
InstallHook

gdi32

GetObjectA
GetDIBits
MoveToEx
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
LineTo

user32

TranslateMessage
SendMessageA
ReleaseDC
RegisterClassExA
PostQuitMessage
GetWindowTextA
GetSystemMetrics
GetMessageA
GetForegroundWindow
GetDC
GetCursorPos
GetClassNameA
FindWindowExA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
wsprintfA

kernel32

lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
WinExec
SystemTimeToFileTime
Sleep
ReadFile
LocalFree
LocalAlloc
GlobalFree
GlobalAlloc
CloseHandle
CreateDirectoryExA
CreateFileA
CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetSystemTime
GetFileSize
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetCommandLineA

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyA
GetUserNameA

wsock32

connect
gethostbyname
htons
inet_addr
closesocket
recv
send
socket
WSAStartup
inet_ntoa

wininet

InternetGetConnectedState

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7a47454cc3eb52ad593a7c83483bac1

Headers

File Characteristics

Imports

wmsro32

gdi32

user32

kernel32

advapi32

wsock32

wininet

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 14KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 14KB