670cff4b5c52f6d913e120d7fb193efe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

670cff4b5c52f6d913e120d7fb193efe_JaffaCakes118
Size

49KB
MD5

670cff4b5c52f6d913e120d7fb193efe
SHA1

5991b8c525a9f8a4c4bb6c277c92c248c2f9e338
SHA256

54852fd6f22ceebf12cfe7058fe34df64361da5db7623e54415a5aade3685a54
SHA512

3a32df08608eed28261630f0f81b09051993386a8a25d7c7f6f4c065effde07e04891f143a638a7bfe09201c9b88e564af392d8ac783ba15df2331a2b98c5061
SSDEEP

768:f0d3PE26jZuj3AjowypvsPD9pmIXy7ljqAAuYZU2aNTv9Aoo+Tyv3W:f0JPE5Qe9pm59q+56oo+kW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
670cff4b5c52f6d913e120d7fb193efe_JaffaCakes118

Files

670cff4b5c52f6d913e120d7fb193efe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b7256de62f7939a58457b3a71399f3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

ioctlsocket
connect
socket
htons
send
select
gethostbyname
inet_addr
WSAStartup
closesocket
recv
WSACleanup

shell32

ShellExecuteA

advapi32

RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegSetValueExA

kernel32

LocalFree
FlushFileBuffers
SetStdHandle
RaiseException
GetProcAddress
GetOEMCP
GetACP
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
IsBadCodePtr
LoadLibraryA
ExitProcess
GetTempPathA
GetSystemDefaultLangID
Sleep
GetTickCount
ExitThread
GetVersionExA
SetFileAttributesA
CopyFileA
ExpandEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
GetLastError
CreateMutexA
Process32Next
CloseHandle
Process32First
CreateToolhelp32Snapshot
GlobalUnlock
GlobalLock
GlobalAlloc
HeapFree
HeapAlloc
DeleteFileA
ReadFile
GetFileSize
CreateFileA
CreateThread
WaitForSingleObject
GetSystemDirectoryA
lstrcmpiA
GetLocaleInfoA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
GetFileType
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
RtlUnwind
WriteFile
SetFilePointer
GetStringTypeA
GetStringTypeW
GetCPInfo

user32

PostMessageA
LoadCursorA
RegisterClassA
MapVirtualKeyA
IsWindowVisible
GetMenuItemID
DestroyWindow
wsprintfA
GetForegroundWindow
GetWindowThreadProcessId
EnumWindows
CreateWindowExA
GetMessageA
DispatchMessageA
TranslateMessage
PostQuitMessage
DefWindowProcA
IsWindow
FindWindowExA
BlockInput
SetForegroundWindow
ShowWindow
keybd_event
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
FindWindowA
GetSystemMetrics
GetClassNameA
SetFocus

urlmon

URLDownloadToFileA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
VariantInit
VariantClear

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6b7256de62f7939a58457b3a71399f3a

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

kernel32

user32

urlmon

ole32

oleaut32

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 5KB - Virtual size: 11KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 11KB