7138051f490d684a21066878983e4aeb_JaffaCakes118

General

Target

7138051f490d684a21066878983e4aeb_JaffaCakes118
Size

29KB
MD5

7138051f490d684a21066878983e4aeb
SHA1

61fb2f740f53cfcbb455999dd71d1a58f94a7018
SHA256

5ceed9417d0317404c178a78dbb05e7b47e43890db10ec2cbb4aa3d955144a87
SHA512

ad33c9f9d1268b85113d02cd27611ab3e1dce3655a8bafa8f465c90aceb79a6cf82f0edc60bc7a41ed23cdd6c191fa54241969a9c3f40a2d8a5326006f0b2fb6
SSDEEP

384:JMPpxRRTZlCDbnQE3XWsHYq11a+B/PjB9ZQPpAM1:JMPpxRRTZkDEYmsHYa1a+ZjB9ZQy4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7138051f490d684a21066878983e4aeb_JaffaCakes118

Files

7138051f490d684a21066878983e4aeb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f6afdb8c28dfd1c00d58f50585142066

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetTempPathA
Sleep
ResumeThread
OpenThread
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
LoadLibraryA
WriteProcessMemory
GetLastError
VirtualAllocEx
OpenProcess
Thread32Next
Thread32First
CreateToolhelp32Snapshot
CreateMutexA
VirtualProtectEx
GetPrivateProfileStringA
lstrcpynA
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetFileSize
ReadFile
SetFilePointer
GetTempFileNameA
VirtualProtect
GetProcessHeap
HeapAlloc
OutputDebugStringA
GetCurrentThreadId
Process32Next
Process32First
WideCharToMultiByte
OpenMutexA
CreateFileA
WriteFile
CloseHandle
FreeResource
GetModuleFileNameA
CreateThread

msvcrt

strcat
sprintf
_except_handler3
_strcmpi
strncpy
??3@YAXPAX@Z
__CxxFrameHandler
memcpy
strrchr
__dllonexit
_onexit
_initterm
_adjust_fdiv
free
strcpy
memset
malloc
strlen
??2@YAPAXI@Z
_stricmp

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle

user32

wvsprintfA
wsprintfA
FindWindowA
GetWindowThreadProcessId

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6afdb8c28dfd1c00d58f50585142066

Headers

File Characteristics

Imports

kernel32

msvcrt

wininet

user32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 2KB - Virtual size: 1KB