72bd5ba876f1a2580c7fd920ea893a52_JaffaCakes118

General

Target

72bd5ba876f1a2580c7fd920ea893a52_JaffaCakes118
Size

22KB
MD5

72bd5ba876f1a2580c7fd920ea893a52
SHA1

c6516776d28cde639f7e50bdbc877b25cf64415c
SHA256

ca5439bdb48fd64dfbb88d7e86df610d7f040418a63d520e2b11dcafb53018f8
SHA512

68b6505c33358eba121e23acd8b7b388e7503dc060364395cc84274c8b16b6b43b6c7c80c0cd416c4f14559b11d5dac061a0f9988fe89800ba08a89ece9110ed
SSDEEP

192:8PWhopTS4QEQh/Rb8H09rygs136olwvbXbV7K5Dm/r2p97VdrQXxyvtNDNUAwd7:oW3r7b8H09r04HsYQMyvXNUhd7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72bd5ba876f1a2580c7fd920ea893a52_JaffaCakes118

Files

72bd5ba876f1a2580c7fd920ea893a52_JaffaCakes118
.dll windows:4 windows x86 arch:x86

61c725ec5d7346118ad90ca39010a219

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateToolhelp32Snapshot
GetCurrentThreadId
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Process32First
ReadFile
GetModuleFileNameA
ReadProcessMemory
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
GetCurrentThread
GetCurrentProcessId
IsBadReadPtr
GlobalFree
GlobalLock
GlobalAlloc
Process32Next
CloseHandle
Sleep
ExitProcess
VirtualProtectEx
VirtualFree
GetFileSize
VirtualAlloc

user32

CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetCursor
GetDC
GetDCEx
GetDesktopWindow
CheckMenuRadioItem
CheckRadioButton
CloseDesktop
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

gdi32

GetBkMode
Chord
CloseMetaFile
CloseEnhMetaFile

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61c725ec5d7346118ad90ca39010a219

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 19KB - Virtual size: 19KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB