754445696b64f02fce5b466786d17376_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

754445696b64f02fce5b466786d17376_JaffaCakes118
Size

139KB
MD5

754445696b64f02fce5b466786d17376
SHA1

eae07efedfeebc23b5595f62a43bc64f13ba2c6f
SHA256

2f81ddbf2b1d28c7116584d3ae2566def7de22992f4cf99e79c48e55d62e6fcf
SHA512

6efc90e9f02892de4c46c553b5227e9510638fb052867a758e0a49db2087b5485870136a917fe79929cc8769adc64c192ea5ce268006ff3fd09d0528e4620836
SSDEEP

3072:e2GrNwRM63/Y2xN/I57Od08kY1gE6BXJtElGdTnq:5RFw2xFU7kkYmEkJqlMLq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
754445696b64f02fce5b466786d17376_JaffaCakes118

Files

754445696b64f02fce5b466786d17376_JaffaCakes118
.exe windows:5 windows x86 arch:x86

69a287f9049996b58c7111cf99cac341

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\John\My Documents\Visual Studio 2010\Projects\Reference Projects\SimpleWebsitePhish\Release\SimpleWebsitePhish.pdb

Imports

wininet

InternetCloseHandle
InternetOpenA
FtpPutFileA
FtpGetFileA
InternetConnectA

kernel32

SetFileAttributesA
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
GetVersionExA
CloseHandle
DeleteFileA
CreateThread
SetFilePointer
SystemTimeToFileTime
SetFileTime
ReadFile
CreateDirectoryA
GetCurrentDirectoryA
LocalFileTimeToFileTime
GetFileSize
CopyFileA
UnmapViewOfFile
GetTickCount
FileTimeToSystemTime
GetLocalTime
GetFileInformationByHandle
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetStringTypeW
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
LCMapStringW
GetLastError
SetConsoleTitleA
ExitThread
GetFileAttributesA
GetConsoleWindow
Sleep
WriteFile
ExpandEnvironmentStringsA
GetTimeFormatA
GetCurrentProcess
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
GetDriveTypeW
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
CompareStringW
HeapReAlloc
WriteConsoleW
IsProcessorFeaturePresent
WideCharToMultiByte
GetTimeZoneInformation
MoveFileA
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
FindClose
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetCommandLineA
HeapSetInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
HeapCreate
GetStdHandle
GetModuleFileNameW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
LoadLibraryW
GetFullPathNameA
PeekNamedPipe
GetCurrentDirectoryW
RaiseException
GetProcessHeap

user32

GetDesktopWindow
wsprintfA
GetKeyState
EnumWindows
GetDC
GetForegroundWindow
GetWindowTextA
GetAsyncKeyState
ReleaseDC
ShowWindow
GetSystemMetrics

gdi32

DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

advapi32

AdjustTokenPrivileges
RegOpenKeyExA
LookupPrivilegeValueA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
RegCloseKey

gdiplus

GdipSaveImageToFile
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69a287f9049996b58c7111cf99cac341

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

gdi32

advapi32

gdiplus

Sections

.text Size: 101KB - Virtual size: 101KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 101KB - Virtual size: 101KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 7KB - Virtual size: 7KB