69d6cc41817234e0881bc0a6c05494dc_JaffaCakes118

General

Target

69d6cc41817234e0881bc0a6c05494dc_JaffaCakes118
Size

64KB
MD5

69d6cc41817234e0881bc0a6c05494dc
SHA1

1e7316cbbdaa36fed1a87bdb01defa1959ec0ea4
SHA256

2a4df8c2edf1944aad7fa2ef4ac3aa29fa977f35b00999a5e8f37fb909909895
SHA512

77a6918f470da3b9c005f80ff29985e7acf5fc24d894929a7a3b96d449fc06e954765813b91e8861a923007b5f0043c0a380a2c611af6556a77e842bf0abf6e3
SSDEEP

768:9WVE+6qiJ+EtI65sD89j7wRgcRoeE2wnqP3vjgtABH1iB9hN92aM2wxZCiVlUen:EugZ165lXwGcbE2gtQY9hcLlUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d6cc41817234e0881bc0a6c05494dc_JaffaCakes118

Files

69d6cc41817234e0881bc0a6c05494dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b508ecd3dfa3c830f9870c76a10af5e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoA
WriteFile
GetProcAddress
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
CompareStringW
CompareStringA
CloseHandle
GetProcessHeap
HeapFree
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
SetFilePointer
GetFileType
SetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetLastError
LCMapStringW
GetTimeZoneInformation
GetLocalTime
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
LCMapStringA

wininet

InternetOpenA
InternetSetCookieA
InternetGetCookieA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetReadFile
InternetCrackUrlA
InternetCloseHandle
HttpSendRequestA
InternetConnectA

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b508ecd3dfa3c830f9870c76a10af5e2

Headers

File Characteristics

Imports

kernel32

wininet

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 10KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 10KB