955edcf0e8a3f4777f2c21fa28a506bf_JaffaCakes118

General

Target

955edcf0e8a3f4777f2c21fa28a506bf_JaffaCakes118
Size

9KB
MD5

955edcf0e8a3f4777f2c21fa28a506bf
SHA1

28e927ace0771655bac20b52c86a291d8a1cd083
SHA256

1165ab3992c49eb48adbd9a853f741efe3d02fe4895e48a0be72e054a8948aa0
SHA512

114d66ce7c48b1a22035c5d0a3ba3558f1cc87c7fd7573203d0ab6585e83479e1a988ecb50819c13a6aad6ae1dfb7d5cc481c80ce82ec36c20998057c8716efb
SSDEEP

192:cryGl2vGOoLOCdnNPh4A86peLhUrFe9nhAPwHJTOMWx3tCR0HS:crydvK1nNPh4ipeLhuFeNKsGS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
955edcf0e8a3f4777f2c21fa28a506bf_JaffaCakes118

Files

955edcf0e8a3f4777f2c21fa28a506bf_JaffaCakes118
.dll windows:1 windows x86 arch:x86

440bca310ff2fa7b3790a204e044e36b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryW
CreateFileA
CreateProcessA
CreateThread
ExitProcess
FreeLibraryAndExitThread
GetCommandLineA
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
OpenEventA
RtlZeroMemory
Sleep
TerminateThread
VirtualAlloc
VirtualProtect
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
lstrlenW

user32

CallWindowProcA
CreateDialogParamW
FindWindowW
SetWindowLongA
SetWindowTextW
ShowWindow
wsprintfA

advapi32

CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

ws2_32

WSASocketA
closesocket
connect
gethostbyname
ioctlsocket
ntohs
recv
select
send
setsockopt
socket

wininet

InternetConnectA

wintrust

WinVerifyTrust

shell32

ShellExecuteA
StrRChrA

icmp

IcmpCloseHandle
IcmpCreateFile
IcmpSendEcho

Exports

Exports

AddProcessExclusion
GetChangeRect
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks

Sections

.code
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

440bca310ff2fa7b3790a204e044e36b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

wininet

wintrust

shell32

icmp

Exports

Exports

Sections

.code Size: 7KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 670B

.code
Size: 7KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 670B