8b9584e58578286c70b09b6a4f99bf53_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8b9584e58578286c70b09b6a4f99bf53_JaffaCakes118
Size

93KB
MD5

8b9584e58578286c70b09b6a4f99bf53
SHA1

93df10fe8f470c0603980a06c72ee7888737a988
SHA256

0e05dc9a7e2237dd47da1dceec920206ff64a276882f24913acb5028955a4c3f
SHA512

3b6ba99c116aaba05256a127fd91b98ccdd2059a3e8d1d8acb7d3ce01e6d20f4e085a16c7ddae0ac29ef9c0193b94233f78c34fbcb2ff46d54f3847c651edee4
SSDEEP

1536:qp/Og4Jc8tIvPA8PyKiP+lioXOiJ8t/pKM4NfFqhXrJtQUByBtWzT/EMdAtm0Bh:qp/OgqYZPcP+co+aRCT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b9584e58578286c70b09b6a4f99bf53_JaffaCakes118

Files

8b9584e58578286c70b09b6a4f99bf53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d368de09fcb83d4d66328117df719c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA
RasGetConnectStatusA
RasGetErrorStringA
RasDialA
RasEnumConnectionsA
RasGetEntryPropertiesA
RasSetEntryPropertiesA
RasValidateEntryNameA
RasEnumDevicesA

kernel32

lstrcpyA
GetSystemDirectoryA
lstrcmpA
CreateThread
CloseHandle
CreateProcessA
Sleep
TerminateThread
SetCommState
GetCommState
GetLastError
CreateFileA
lstrcpynA
GetTickCount
ExitThread
GlobalFree
GlobalAlloc
WaitForSingleObject
MultiByteToWideChar
GetCommandLineA
FileTimeToSystemTime
lstrcatA
UnmapViewOfFile
lstrlenA
WriteFile
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetStdHandle
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
GetACP
GetSystemTime
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
GetFileTime
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
ReadFile
SetFilePointer
SetHandleCount

user32

MessageBoxA
wsprintfA
BeginPaint
EndPaint
MoveWindow
LoadBitmapA
LoadIconA
SendMessageA
GetDlgItem
SetWindowTextA
ShowWindow
DialogBoxParamA
EndDialog

gdi32

SelectObject
BitBlt
DeleteDC
DeleteObject
GetObjectA
CreateCompatibleDC

advapi32

RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

shell32

Shell_NotifyIconA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

wininet

InternetOpenA
InternetConnectA
FtpPutFileA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d368de09fcb83d4d66328117df719c2

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

advapi32

shell32

ole32

wininet

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 44KB - Virtual size: 44KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 44KB - Virtual size: 44KB