75309b49c153b72ea9cd85e186695f33_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

75309b49c153b72ea9cd85e186695f33_JaffaCakes118
Size

66KB
MD5

75309b49c153b72ea9cd85e186695f33
SHA1

017dac6828c071839cf8e2a272996bb24672c6db
SHA256

7dbf8cda004fc8ee16d175cfd44fc5b6639c4f155bb158efa8b78fc5bb199cfd
SHA512

3dd3f0a77224158a07d8c16c170be726e8c4c32fe4e9a5c6f6305dad25cc5c692d422393fcba07a2d34ea9259d066a8455338fca46e734d4b31abb392651d7ab
SSDEEP

768:DeUI48adQ7xkUF7SQekdmEhEjXmBD3mj6Zz6ZjkfZa8g0btKGQpP6p:IWKxkUBSQekddhE2j77I6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75309b49c153b72ea9cd85e186695f33_JaffaCakes118

Files

75309b49c153b72ea9cd85e186695f33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83421429a44f92e3fd62d06e357cf78e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
lstrlenA
DeleteFileA
GetModuleFileNameA
GetSystemDirectoryA
SetFileAttributesA
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
GetShortPathNameA
GetCurrentProcessId
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
Process32Next
TerminateProcess
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetStartupInfoA
OpenProcess
Sleep
FreeLibrary
LockResource
CopyFileA

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

mfc42

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
sscanf
_setmbcp
atol
_mbscmp
__CxxFrameHandler
exit

psapi

EnumProcessModules
GetModuleFileNameExA

shell32

ShellExecuteA

user32

KillTimer
GetClientRect
GetForegroundWindow
FindWindowA
EnableWindow
GetAsyncKeyState
GetKeyboardState
IsIconic
DrawIcon
SetTimer
SetWindowPos
LoadIconA
IsWindow
GetWindowThreadProcessId
GetSystemMetrics
SendMessageA
FindWindowExA

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA

wsock32

gethostname
inet_ntoa
gethostbyname

Sections

code
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

83421429a44f92e3fd62d06e357cf78e

Headers

File Characteristics

Imports

kernel32

advapi32

mfc42

msvcrt

psapi

shell32

user32

wininet

wsock32

Sections

code Size: 60KB - Virtual size: 60KB

.rsrc Size: 2KB - Virtual size: 4KB

.avc Size: 3KB - Virtual size: 4KB

code
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 2KB - Virtual size: 4KB

.avc
Size: 3KB - Virtual size: 4KB