a927b4479c07e87727dbdfc6d59a135f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a927b4479c07e87727dbdfc6d59a135f_JaffaCakes118
Size

58KB
MD5

a927b4479c07e87727dbdfc6d59a135f
SHA1

31190b630d61f5c587e254a2cc0110d27c7ccf97
SHA256

fb324a917b7d4c342a348c371532763adb285b0742e2aa946c4e840cecc9b7ac
SHA512

027c150476a6b6cff89cdc210835b0cb03917754561ca89e9cbb71c134209e61eb258a2bcc10135b617903ba6e76ae3d006253915c30d6078201f4a972903382
SSDEEP

768:WtyPuoyyamHaN7L2iEJFmSSJmCaKNY8eHiGumKL1k0x3oF:eyPuoyBDLTI/72veCGuhG0oF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a927b4479c07e87727dbdfc6d59a135f_JaffaCakes118

Files

a927b4479c07e87727dbdfc6d59a135f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbe9316878126ecddb7f3d4f2a5451fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
Sleep
GetLocaleInfoA
InterlockedDecrement
GetTickCount
CreateProcessA
lstrcmpiA
CreateThread
GetProcAddress
LoadLibraryA
CloseHandle
CreateFileA
GetModuleFileNameA
ExitProcess
GetLastError
CreateMutexA
WideCharToMultiByte
SetFilePointer
WriteFile
lstrlenA
GetFileSize
GetSystemTime
RaiseException
LocalFree
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GlobalAlloc
GlobalLock
ReadFile
GlobalUnlock
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapFree
GetVersion
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

user32

SetClipboardData
OpenClipboard
VkKeyScanA
keybd_event
SetFocus
CloseClipboard
SetForegroundWindow
BlockInput
MessageBoxA
EmptyClipboard

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysStringLen
SysAllocString
VariantClear
SysFreeString
GetErrorInfo
VariantInit

ws2_32

closesocket
WSAStartup
inet_addr
inet_ntoa
gethostbyname
recv
send
WSACleanup
connect
socket
htons

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dbe9316878126ecddb7f3d4f2a5451fb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 10KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 10KB