a08832980c3069cd8ca1572af5ace451_JaffaCakes118

General

Target

a08832980c3069cd8ca1572af5ace451_JaffaCakes118
Size

23KB
MD5

a08832980c3069cd8ca1572af5ace451
SHA1

c421ca3fae7629b2d392d3deaa5e6e2fdf620760
SHA256

ade1a34f9a31bbceced36f19a913a7541185846627baafa86baf9d6e1e1dcee4
SHA512

a3018f4441f2c42d210132b07115fcf056a9d1b07ea7e423febfd34fbc995d726075bdaf2f598e410361531cf59bb5c110c6df2a8db9c5e4956938d446738198
SSDEEP

384:aIGf+v4Ein+k0cWnK2ZTFJRGDZqp0eTyzdnMyymu8+LWQ:aIGf+v4Ei0PFjGU0eTyzdMcu8+LW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a08832980c3069cd8ca1572af5ace451_JaffaCakes118

Files

a08832980c3069cd8ca1572af5ace451_JaffaCakes118
.dll windows:4 windows x86 arch:x86

80dfe32387057158d652f3d042e40826

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualProtectEx
TerminateProcess
WideCharToMultiByte
GetModuleHandleA
GlobalFree
GlobalLock
GlobalAlloc
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
OutputDebugStringA
GetPrivateProfileStringA
GetProcAddress
OpenProcess
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
ReadProcessMemory
VirtualAlloc

user32

UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton
CloseDesktop
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

gdi32

CloseMetaFile
CancelDC
CloseEnhMetaFile
Chord

advapi32

RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80dfe32387057158d652f3d042e40826

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 20KB - Virtual size: 20KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB