88b5f635ac9031bcdeda1f751952f966_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

88b5f635ac9031bcdeda1f751952f966_JaffaCakes118
Size

14KB
MD5

88b5f635ac9031bcdeda1f751952f966
SHA1

2dd9ca54c0ee0b96dfef90a1143c0611aab62ae0
SHA256

2a48fdfdca11ed1c16475d793bcdfc70ba71c972e7381f4e6826b6f3cb2f2793
SHA512

8945763ca104651eb50d05e32c3e698c10ace905e96333a8cf1d6513341eb10e09d0de7016fd1932bbf0f57febef2bfd1dff52e52a0f872094ec4225bce51aa8
SSDEEP

192:bNLOT34oAgNbezTsvXSKuCKc164av3DrL9vjbP1oynLQxLu4/JxxfKDsPsvNl:bN4bRNiHsvCKLU4239j1OLu2JxkvNl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88b5f635ac9031bcdeda1f751952f966_JaffaCakes118

Files

88b5f635ac9031bcdeda1f751952f966_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56408b0f42c280a7f09796e19612f1de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
WriteConsoleInputA
CreateFileA
AllocConsole
GetConsoleDisplayMode
ReadFile
PeekNamedPipe
GetExitCodeProcess
CreateProcessA
OpenProcess
GetFileAttributesA
GetSystemDirectoryA
ExpandEnvironmentStringsA
Sleep
GetVolumeInformationA
GetDriveTypeA
lstrcatA
GetLogicalDrives
Process32Next
Process32First
CreateToolhelp32Snapshot
WriteFile
GetFileSize
GetCurrentProcess
CreateMutexA
GetModuleFileNameA
GetModuleHandleA
CreatePipe
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateThread
WaitForSingleObject
CloseHandle
TerminateProcess
SetStdHandle
GetLastError
GetStartupInfoA

msvcrt

sscanf
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strlen
strcpy
??2@YAPAXI@Z
atol
sprintf
atoi
_strcmpi
strcat
__CxxFrameHandler
memset

wininet

InternetQueryOptionA
InternetSetOptionA
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
HttpAddRequestHeadersA
InternetReadFile
InternetCloseHandle
InternetConnectA

advapi32

CreateProcessAsUserA
CloseServiceHandle
EnumServicesStatusExA
OpenSCManagerA
ControlService
OpenServiceA
StartServiceA
OpenProcessToken

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

secur32

GetUserNameExA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56408b0f42c280a7f09796e19612f1de

Headers

File Characteristics

Imports

kernel32

msvcrt

wininet

advapi32

urlmon

shell32

secur32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 904B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 904B