a55c569ecf5aefef37f8d214b0000c87_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a55c569ecf5aefef37f8d214b0000c87_JaffaCakes118
Size

92KB
MD5

a55c569ecf5aefef37f8d214b0000c87
SHA1

270a75b4308383fe3365de225cde5dafacb599c6
SHA256

e666b2b5e7d104d46392ca75caecf961745dc6bcc41b8bd5ed08f3b280ec8ab3
SHA512

66cbe89346075e3e552ff7fe64f349d57d653128162f3e2028b2b0393af23a8b863c91ded2e3ff308f8a2a968c9d2e75d64859d8b3a0a671ade3aaf2563922e9
SSDEEP

1536:GI2giM4iVTtcDloNPXaWg06KYhTFl+X16R0e8uZ1lfBy9mS+HDvgDm/f3:swTtIsX45TuX100ev1lGmdUDmH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55c569ecf5aefef37f8d214b0000c87_JaffaCakes118

Files

a55c569ecf5aefef37f8d214b0000c87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91e54af283f2d459c442b26cc64a1361

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetQueryDataAvailable
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetSetOptionA

shlwapi

PathFileExistsA
PathGetDriveNumberA

snmpapi

SnmpUtilOidCpy

mfc42

ord825
ord823

msvcrt

memmove
strncat
sprintf
div
_strdup
_strlwr
wcslen
_CxxThrowException
??1type_info@@UAE@XZ
_except_handler3
strstr
strncpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__CxxFrameHandler
__setusermatherr

kernel32

GetEnvironmentVariableA
GetStartupInfoA
DeviceIoControl
LocalFree
GetComputerNameA
GetVersion
GetModuleHandleA
VirtualAlloc
VirtualFree
GetTempPathA
GetCurrentProcess
TerminateProcess
GetVolumeInformationA
LoadLibraryA
GetProcAddress
FreeLibrary
GetTickCount
InterlockedDecrement
lstrlenA
MultiByteToWideChar
SetLastError
GetModuleFileNameA
GetLastError
SetFilePointer
ReadFile
CreateFileA
WriteFile
WideCharToMultiByte
CreateProcessA
CloseHandle

user32

CharToOemA

advapi32

GetUserNameA

shell32

ShellExecuteExA
SHGetSpecialFolderPathA

ole32

CoInitialize
CLSIDFromString
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromProgID

oleaut32

SysFreeString
VariantClear
GetErrorInfo
SysAllocString

msvcp60

?_Xran@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

Sections

.text
Size: 85KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91e54af283f2d459c442b26cc64a1361

Headers

File Characteristics

Imports

wininet

shlwapi

snmpapi

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

oleaut32

msvcp60

Sections

.text Size: 85KB - Virtual size: 86KB

.rdata Size: 6KB - Virtual size: 5KB

.text
Size: 85KB - Virtual size: 86KB

.rdata
Size: 6KB - Virtual size: 5KB