b9ec9170184f910b8e519d6ad736af8c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b9ec9170184f910b8e519d6ad736af8c_JaffaCakes118
Size

76KB
MD5

b9ec9170184f910b8e519d6ad736af8c
SHA1

540985c9f8a996da56f2ea500fc68b09ba20df0b
SHA256

b2e26db699a094ace237df82936fe49225560b2a5e37dee46044ba2f1b5b057f
SHA512

ecf8ab312e8c73d4a6ef1b67f418aa3e3dc4e1434c822a5ca484f0d878a7f3ac6b99810acb0190bea0ed77b8c935d8d85e6393be61b5d76ef044dd55467f0cb3
SSDEEP

1536:AbgGtFFM2S1Mvcot/bT6XLUPmMr8misZjNe1xVQ+t:A7iFe/bMS8M81xVQ+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ec9170184f910b8e519d6ad736af8c_JaffaCakes118

Files

b9ec9170184f910b8e519d6ad736af8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cf0a4402e7de49255766cd880e08f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetGetConnectedState
InternetOpenUrlW
InternetReadFile
InternetOpenW
InternetAttemptConnect
InternetCloseHandle

kernel32

WriteFile
CloseHandle
Sleep
ResumeThread
lstrcpyW
FileTimeToSystemTime
GetModuleFileNameW
CreateFileW
DeleteFileW
GetSystemTime
GetSystemDirectoryW
CopyFileW
GetFileTime
GetLastError
ExitProcess
SetCurrentDirectoryW
SetWaitableTimer
CreateWaitableTimerW
WaitForSingleObject
GetTickCount
CreateThread
OpenWaitableTimerW
WriteConsoleW
GetConsoleOutputCP
SetFileTime
lstrcatW
GetLocalTime
SystemTimeToFileTime
GetCurrentDirectoryW
CreateProcessW
HeapSize
CreateFileA
FlushFileBuffers
GetTimeZoneInformation
InterlockedIncrement
WriteConsoleA
SetStdHandle
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
SetFilePointer

user32

CharLowerW

advapi32

RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenSCManagerW
DeleteService
CloseServiceHandle
SetServiceStatus
CreateServiceW
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW

ole32

OleInitialize
OleUninitialize
CLSIDFromProgID
CoCreateInstance

oleaut32

VarBstrCat
VariantClear
SysAllocString
SysFreeString

iphlpapi

GetIfTable

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8cf0a4402e7de49255766cd880e08f74

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

ole32

oleaut32

iphlpapi

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 42KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 42KB