b334f828e7ff33ab6ac7059c89899fb0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b334f828e7ff33ab6ac7059c89899fb0_JaffaCakes118
Size

165KB
MD5

b334f828e7ff33ab6ac7059c89899fb0
SHA1

4cc9f8fe2e26d3d13c5419457d74315b5518dd27
SHA256

727aaade892666e76e5a3d375ce45f90bfaf0d5463659abb4b64b9b815e3ea4a
SHA512

8a830076733f58a816f7ac84b9571e75145ee59974b3b87573df278f8caa1a208c18aa4a7f31a413844a4959b5fff10e394b6718f24dac627652d1d7e51f8460
SSDEEP

3072:8m+TLp1+67bIKkkDA+LiIliGBwY6MNS9GcYX5:8mLkVA0nDkGc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b334f828e7ff33ab6ac7059c89899fb0_JaffaCakes118

Files

b334f828e7ff33ab6ac7059c89899fb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3be4c5401d43f3a8a1ff1911cf37f7c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExW
CreateFileW
GetModuleHandleW
GetDateFormatW
LockResource
CreateEventW
FileTimeToLocalFileTime
HeapWalk
HeapCompact
HeapCreate
HeapFree
HeapAlloc
GetCurrentThread
WriteConsoleW
SetStdHandle
GetLocalTime
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
SetFilePointer
GetLastError
GetModuleFileNameA
WriteFile
RtlUnwind
VirtualFree
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
QueryPerformanceCounter
GetSystemTime
FlushFileBuffers
GetVolumeInformationW
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
CloseHandle
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
GetSystemTimeAsFileTime

user32

GetDlgCtrlID
GetWindowLongW
CallWindowProcW
GetClassInfoExW
AppendMenuW
TrackPopupMenu
GetFocus
RegisterClassExW
SetFocus
ScrollWindow
RemoveMenu
GetMenuItemInfoW
UnhookWindowsHookEx
GetSystemMenu
DrawTextW
GetMessageTime
KillTimer
GetCursorPos

gdi32

TextOutW
Escape
RectVisible

wininet

InternetOpenW
InternetOpenUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryDataAvailable
HttpQueryInfoW
InternetGetLastResponseInfoW
InternetWriteFile
InternetReadFile
HttpSendRequestW
InternetConnectW
HttpOpenRequestW
InternetCloseHandle
InternetSetOptionExW

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3be4c5401d43f3a8a1ff1911cf37f7c4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

wininet

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 330KB

.rsrc Size: 80KB - Virtual size: 76KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 330KB

.rsrc
Size: 80KB - Virtual size: 76KB

.reloc
Size: 1KB - Virtual size: 1KB