b14e78f46bbfee91771dbfe5a1d92b9e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b14e78f46bbfee91771dbfe5a1d92b9e_JaffaCakes118
Size

364KB
MD5

b14e78f46bbfee91771dbfe5a1d92b9e
SHA1

434a2bdb80f4efa0447552b13931653ea6aee6e2
SHA256

5a1519d8a6462a6edac231fa56dc371af2ad4c2ae8ae1ad5ec427ae7f47c5abc
SHA512

0caac77ab759ac654b5a333ede303efa0ae90814023d126f413ac02f7b0e1ccef97a2b0ae72bf346dd22bc5a5955de14dc52a289580d6bb09f43f2ef0a0e7626
SSDEEP

3072:E1zJCaSkTUD+YwlvKY1Kg928K+tS98lzCJBtvqGt+rhuuoSwz26CvYkGQ03J1rf2:E1NTGwlvKY1KL8KRxJBtvqOz2TvRMJ1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b14e78f46bbfee91771dbfe5a1d92b9e_JaffaCakes118

Files

b14e78f46bbfee91771dbfe5a1d92b9e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

40af232a818422570f354ec95e1e1a72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

kernel32

GetVersionExA
GetSystemTime
GetFullPathNameA
LoadLibraryA
FlushFileBuffers
CopyFileA
DeleteFileA
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetSystemDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
WriteProcessMemory
VirtualProtectEx
OutputDebugStringA
ReadProcessMemory
GlobalAlloc
CreateThread
GetWindowsDirectoryA
IsBadReadPtr
GlobalLock
GetModuleFileNameA
WideCharToMultiByte
GlobalFree
GetCommandLineA
GetTickCount
Sleep
lstrcmpiA
MultiByteToWideChar
WaitForSingleObject
CreateRemoteThread
VirtualAllocEx
OpenProcess
VirtualQueryEx
GetThreadContext
CreateProcessA
TerminateProcess
ResumeThread
SetThreadContext
GetTempPathA
SetEvent
CreateEventA
OpenEventA
ResetEvent
GlobalUnlock
GetLastError
CreateMutexA
TerminateThread
GetCurrentProcessId
lstrlenA
GetCurrentThreadId
GetOEMCP
GetACP
IsBadCodePtr
SetUnhandledExceptionFilter
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
CloseHandle
VirtualFree
VirtualAlloc
InterlockedExchange
VirtualFreeEx
RaiseException
RtlUnwind
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
InitializeCriticalSection
ExitProcess
HeapReAlloc
HeapAlloc
HeapSize
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetStdHandle
GetCPInfo

user32

GetInputState
PostThreadMessageA
GetMessageA
MessageBoxA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
wsprintfA
FindWindowA

advapi32

SetSecurityDescriptorDacl
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor

shell32

SHGetFileInfoA

ws2_32

inet_ntoa
getpeername
htons

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40af232a818422570f354ec95e1e1a72

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

shell32

ws2_32

Sections

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 20KB - Virtual size: 51KB

.rsrc Size: 116KB - Virtual size: 115KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 20KB - Virtual size: 51KB

.rsrc
Size: 116KB - Virtual size: 115KB

.reloc
Size: 12KB - Virtual size: 10KB