76ec7372b724f1d566c63e7794fae650_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

76ec7372b724f1d566c63e7794fae650_JaffaCakes118
Size

76KB
MD5

76ec7372b724f1d566c63e7794fae650
SHA1

43ef34d4bfe5e9f9165f7c96537dd4273c0a9081
SHA256

93101b3cd2ff084620fa57e3514c6834b10aae239fcec5c0cb579c09666a0642
SHA512

3d54bbc9bc162abf3891475adb761e4bdf0b2c993866981fc3518c7a3fa5ae03d98075baee154baf11d16e4aaedf20744cc944a209987e59ec00ffc27df2e9cc
SSDEEP

1536:7RDzY0QI8tfYCTvaDTbbV0aJHDtzc85IaQSxLu+tw:fIUHbvlQSxLu+tw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76ec7372b724f1d566c63e7794fae650_JaffaCakes118

Files

76ec7372b724f1d566c63e7794fae650_JaffaCakes118
.exe windows:4 windows x86 arch:x86

340e3776652cb4cc2f94178a63500fa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenUrlW
InternetGetConnectedState
InternetReadFile
InternetAttemptConnect
InternetOpenW

kernel32

CloseHandle
Sleep
ResumeThread
FileTimeToSystemTime
lstrcpyW
GetModuleFileNameW
CreateFileW
CreateProcessW
GetSystemDirectoryW
CopyFileW
GetTimeZoneInformation
GetLastError
ExitProcess
GetFileTime
SetWaitableTimer
CreateWaitableTimerW
WaitForSingleObject
DeleteFileW
GetSystemTime
GetTickCount
OpenWaitableTimerW
CreateThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
WriteFile
lstrcatW
SetFileTime
GetLocalTime
SystemTimeToFileTime
GetCurrentDirectoryW
HeapSize
CreateFileA
FlushFileBuffers
SetCurrentDirectoryW
GetCPInfo
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
MultiByteToWideChar
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA

user32

GetForegroundWindow
SetForegroundWindow
CharLowerW

advapi32

QueryServiceConfigW
OpenServiceW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenSCManagerW
DeleteService
CloseServiceHandle
SetServiceStatus
CreateServiceW
ChangeServiceConfigW

ole32

CoCreateInstance
CLSIDFromProgID
OleInitialize
OleUninitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
VarBstrCat

iphlpapi

GetIfTable

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

340e3776652cb4cc2f94178a63500fa8

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

ole32

oleaut32

iphlpapi

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 44KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 44KB