b90880ebc73aef9ea24ea3013022b5be_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b90880ebc73aef9ea24ea3013022b5be_JaffaCakes118
Size

64KB
MD5

b90880ebc73aef9ea24ea3013022b5be
SHA1

860bc237982cea11f6ff2f570a389f44b0ccd819
SHA256

bc483f00da3323f578d605758ae75b68a0c66ab844357bc55195342a4d45da51
SHA512

9ba184a80905928cab9e90193db3a73dd582e9c34cb9cd82f537eaa09e3b4515b39e483832b2d6dab88fcb3eea8f747d9d3460062fb0ff1b35d759765fce282e
SSDEEP

768:kZDh8xmX9EM9qmBKZtXodlkkcsTAnN9Gu8NS84Aieo3/MH++k:kqQS5KT6kHTAnGKooUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b90880ebc73aef9ea24ea3013022b5be_JaffaCakes118

Files

b90880ebc73aef9ea24ea3013022b5be_JaffaCakes118
.dll windows:4 windows x86 arch:x86

46f6f3c5caaecffead1dcb3cc01b46b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetComputerNameA
GlobalMemoryStatus
GetSystemInfo
CreateProcessA
GetEnvironmentVariableA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
SetCurrentDirectoryA
lstrcatA
Sleep
ReadFile
WaitForSingleObject
SetFilePointer
GetFileSize
CreateFileA
WriteFile
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
lstrlenA
FileTimeToLocalFileTime
lstrcmpA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
SetEvent
TerminateProcess
CreateThread
CreateEventA
DeleteFileA
DisableThreadLibraryCalls
GetVersion
GetDiskFreeSpaceExA
GetVersionExA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetOEMCP
HeapFree
HeapAlloc
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP

advapi32

GetUserNameA
RegDeleteKeyA

ws2_32

gethostname
gethostbyname
inet_ntoa
WSAStartup

wininet

HttpOpenRequestA
HttpQueryInfoA
InternetSetOptionA
HttpSendRequestExA
InternetCloseHandle
InternetWriteFile
InternetReadFile
HttpSendRequestA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46f6f3c5caaecffead1dcb3cc01b46b9

Headers

File Characteristics

Imports

kernel32

advapi32

ws2_32

wininet

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB