67ea385b1a2bf6613b08ffda147c14c4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

67ea385b1a2bf6613b08ffda147c14c4_JaffaCakes118
Size

18KB
MD5

67ea385b1a2bf6613b08ffda147c14c4
SHA1

db3f65d32e240e364475f26f6b737e0b7cfe1da1
SHA256

8dc05c993244cdff8e364dde8e0ef9307732ad6536d3e1251d395df306fd5a0f
SHA512

bef4d54a0578dda65e66881309b92213ba46b8f5e08739fb2d7738717a4f9efe8fe047726750e699c18da10a45ac9d9015acf27b851e64e58600177cb04b62b9
SSDEEP

384:xB1Ga3nQc1SXhP97pOur3NS6CpiH0gdWyHSTZ:L3nh4r0GmatUyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67ea385b1a2bf6613b08ffda147c14c4_JaffaCakes118

Files

67ea385b1a2bf6613b08ffda147c14c4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6ef357a42fe09f2ddf4fdf85c2f3bff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

htons
inet_addr
gethostbyname
recv
inet_ntoa
WSAStartup
ioctlsocket
send
socket
connect
WSACleanup
closesocket

user32

SetClipboardData
CloseClipboard
keybd_event
SetFocus
EmptyClipboard
OpenClipboard
VkKeyScanA
SetForegroundWindow
wsprintfA
BlockInput
ShowWindow

advapi32

EnumServicesStatusA
CloseServiceHandle
OpenProcessToken
ImpersonateLoggedOnUser
OpenSCManagerA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

fopen
_onexit
__dllonexit
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
rand
srand
strstr
strncpy
malloc
time
fclose
fwrite
strtok
atoi
free
_initterm
_adjust_fdiv

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit

psapi

GetModuleBaseNameA
EnumProcesses
EnumProcessModules

kernel32

CreateFileA
CreateThread
CreateProcessA
LoadLibraryA
GetProcAddress
lstrcpyA
lstrlenA
lstrcmpA
lstrcpynA
CreateMutexA
GlobalUnlock
OpenProcess
lstrcmpiA
GetLocaleInfoA
Sleep
GetTickCount
InterlockedDecrement
GetWindowsDirectoryA
GlobalAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
GetLastError
CloseHandle
GlobalLock

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6ef357a42fe09f2ddf4fdf85c2f3bff

Headers

File Characteristics

Imports

wsock32

user32

advapi32

wininet

msvcrt

ole32

oleaut32

psapi

kernel32

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 904B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 904B