acfc98402c75b91a4ee393215cffcd3d_JaffaCakes118

General

Target

acfc98402c75b91a4ee393215cffcd3d_JaffaCakes118
Size

32KB
MD5

acfc98402c75b91a4ee393215cffcd3d
SHA1

c7f67ac85f0ba755d175175bbca8b55d107aeb1a
SHA256

ecf840486ac61606cb20425d3e3af660dd1de961e775950bcd2ae36cdf17e532
SHA512

b875fc5d9a05c6b46ab4bdc2984caeb9bd231e37197a12eb2f6182549bcdf6fa28195cc0e44d86d6697616269e40ebefd06864264542eedc51640cf06f548875
SSDEEP

384:RLS8u+yjQVrMYk9a2GHWGzqyH/EGFK2DotXhAGuabLz6JBvzglzjMI6:M8ur0VrMpu/AKGua/z6JBbg5jM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acfc98402c75b91a4ee393215cffcd3d_JaffaCakes118

Files

acfc98402c75b91a4ee393215cffcd3d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9b9cc8260f2a7d3fc0632b58815b7d93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTempPathA
MulDiv
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
WaitForMultipleObjects
WaitForSingleObject
DeleteFileA
CreateEventA
SetFilePointer
GetModuleFileNameA
GetTempFileNameA
InterlockedExchange
RtlUnwind
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
GetModuleHandleA
FreeLibrary
GetProcAddress
lstrlenA
CreateProcessA
ExitThread
CreateThread
GetLastError
SetEvent
GlobalFree
GlobalAlloc
lstrcpynA
lstrcpyA
VirtualQuery

user32

GetForegroundWindow
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
wsprintfA
SetWindowTextA
SendMessageA
GetDlgItem
GetFocus
IsWindowVisible
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CharLowerBuffA
ShowWindow
GetClientRect

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegEnumValueA

wininet

InternetReadFile
InternetSetFilePointer
InternetOpenA
InternetCloseHandle
InternetCrackUrlA
FindCloseUrlCache
FindFirstUrlCacheEntryA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

x
y
z

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b9cc8260f2a7d3fc0632b58815b7d93

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

version

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB