b351bf12bf5903c5e1cc922a1310de81_JaffaCakes118

General

Target

b351bf12bf5903c5e1cc922a1310de81_JaffaCakes118
Size

31KB
MD5

b351bf12bf5903c5e1cc922a1310de81
SHA1

d891955fff8dca201ea84eb1e9bff521e9ec5e2d
SHA256

2100621d71548deb9cf2c2dc34f5c18ca636d03be63eb29292c30cc1bfc4210e
SHA512

03bd60b44ab095e29c0f3e58fb2318c1eb94e1394e8308a9e759d5f6bab9b83d9b586ae527f2fc7e08909b4d9f298ce77e28d9b5f7d955d9017bc944fe9267c7
SSDEEP

768:T5GlyWmdT0nGlp06tuysJh+IyP9UQIlC3:lGdmunIrt5umYlk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b351bf12bf5903c5e1cc922a1310de81_JaffaCakes118

Files

b351bf12bf5903c5e1cc922a1310de81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b171cc2489fb890d17b50ebcf14dd19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
lstrcpyA
lstrlenA
WaitForSingleObject
CreateProcessA
GetModuleFileNameA
Sleep
GetVersion
lstrcatA
CreateFileA
WriteFile
GetSystemDirectoryA
CloseHandle
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetFilePointer
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemInfo

advapi32

SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorSacl
InitializeSecurityDescriptor

wininet

InternetOpenA
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b171cc2489fb890d17b50ebcf14dd19

Headers

File Characteristics

Imports

kernel32

advapi32

wininet

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 16B