b426b76ed7d0dc2273c1cbd8e5d845d9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b426b76ed7d0dc2273c1cbd8e5d845d9_JaffaCakes118
Size

55KB
MD5

b426b76ed7d0dc2273c1cbd8e5d845d9
SHA1

5572aa3c2b128b2731dda7f6b21a263bd29d6d66
SHA256

50da52a0771f195fc36689e0b0db7fc707bb52c9d8eea526071d3b3adb6084bf
SHA512

070b2a26f44e7e987e52fb0cec79af5ac0ac14a7ca295d57085e1cf3970bce984bdc6f69ecd19ad90672a83118b58edac6b324652e26568443879563040c6c68
SSDEEP

768:mxowCSZNNlBTw2ewLIXetoJXctYmuFMeNF58RnrldAmOz2BdZ2ZimbdjKK:mhHBT7ewtoJXctuJNF5GA2Z2ZZ2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b426b76ed7d0dc2273c1cbd8e5d845d9_JaffaCakes118

Files

b426b76ed7d0dc2273c1cbd8e5d845d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a00386beebe59c57dacbf8cfd80454e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadWritePtr
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
lstrcatA
GetTempPathA
SetCurrentDirectoryA
GetSystemDirectoryA
GetVersionExA
GetLastError
GetCurrentProcess
GetModuleFileNameA
Process32Next
OpenProcess
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
TerminateProcess
SetPriorityClass
GetOverlappedResult
DeviceIoControl
VirtualProtect
WriteProcessMemory
VirtualAlloc
VirtualAllocEx
CreateRemoteThread
ReadProcessMemory
FreeLibrary
Sleep
SetErrorMode
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
SetEndOfFile
GetModuleHandleA
SetFilePointer
ReadFile
CreateFileA
WriteFile
WaitForSingleObject
CreateEventA
CreateThread
CloseHandle
SetEvent
GetFileAttributesA
SetFileAttributesA
DeleteFileA
CopyFileA
MoveFileA
RemoveDirectoryA
CreateDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetLogicalDriveStringsA
GetDriveTypeA
GetVersion
GetTickCount
GetStartupInfoA

user32

GetDC
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetKeyNameTextA
ToAscii
GetKeyboardState
GetSystemMetrics
GetForegroundWindow
wsprintfA
UnregisterClassA
DispatchMessageA
SendInput
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassExA
GetWindowTextA
DestroyWindow
LoadCursorA
DefWindowProcA
SetTimer
PostQuitMessage
MessageBoxA
ExitWindowsEx
PostMessageA
IsWindow
SendMessageA
keybd_event
EnumWindows
GetWindowTextLengthA
GetWindowLongA
IsWindowVisible
BringWindowToTop
mouse_event
VkKeyScanA
SetForegroundWindow
GetWindowThreadProcessId
SetWindowTextA
SetWindowPos
ShowWindow

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetDIBits
DeleteObject
DeleteDC

advapi32

RegDeleteKeyA
CreateServiceA
CloseServiceHandle
OpenServiceA
ControlService
DeleteService
RegCloseKey
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegQueryValueExA
StartServiceA
GetUserNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA

shell32

ShellExecuteA

wsock32

inet_ntoa
getpeername
ntohs
closesocket
WSAGetLastError
bind
listen
socket
htons
WSAAsyncSelect
connect
WSAStartup
ioctlsocket
gethostbyname
send
recv
accept

shlwapi

SHDeleteKeyA

wininet

InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

msvcrt

_CxxThrowException
__CxxFrameHandler
fopen
fwrite
fclose
realloc
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
strtok
free
malloc
atol
_stricmp
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
printf
_controlfp

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a00386beebe59c57dacbf8cfd80454e2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

wsock32

shlwapi

wininet

avicap32

msvcrt

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 2KB