76c3758015146475e9d644e5ccbe1761_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

76c3758015146475e9d644e5ccbe1761_JaffaCakes118
Size

64KB
MD5

76c3758015146475e9d644e5ccbe1761
SHA1

59beb5cc9580885b4e5afcf6881432bb0122e2c2
SHA256

3d57d63c950fda55dc52b09493631b6f81bb68a17ae34219442419d5c86611d9
SHA512

318aa7a5813ca99fb144d1b81b6f9888042cf82fbd0b4d9ea2e23bd0e6f1e0defc074386a2d30213e93f0904009a713233e881095c577c179414159e111f125e
SSDEEP

1536:XLVL8LGx9rAcPICoDEgmuURn+Oc/cdH0/3SrJfty:XJQyxV2EP8Y10/irJfty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c3758015146475e9d644e5ccbe1761_JaffaCakes118

Files

76c3758015146475e9d644e5ccbe1761_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38b8a52d744b5160cc557058077518f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

shutdown
inet_ntoa
ioctlsocket
ntohl
htonl
getsockname
gethostbyname
WSAStartup
select
setsockopt
bind
listen
accept
recv
send
inet_addr
htons
socket
connect
closesocket
WSACleanup

shell32

SHGetFolderPathA

advapi32

RegQueryValueExA
RegDeleteValueA
GetUserNameA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA

kernel32

GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
ReadFile
HeapReAlloc
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
WaitForSingleObject
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
CloseHandle
GetCurrentProcess
FindClose
FindFirstFileA
DeleteFileA
SetFileAttributesA
TerminateProcess
OpenProcess
lstrcmpiA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetWindowsDirectoryA
GetSystemDirectoryA
Sleep
ExitThread
ExitProcess
CreateProcessA
GetModuleFileNameA
CreateThread
GetTickCount
GetTempPathA
SetEndOfFile
CreateMutexA
SetErrorMode
GetLastError
CreateDirectoryA
TerminateThread
GetVersionExA
ExpandEnvironmentStringsA
GetFileAttributesA
GetModuleHandleA
WriteFile
CreateFileA
CopyFileA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
SetFileTime
GetFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc

user32

CharLowerA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

38b8a52d744b5160cc557058077518f7

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

wininet

kernel32

user32

version

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 7KB - Virtual size: 19KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 7KB - Virtual size: 19KB