bb20723b161ccef109ac3f2c2673d6dd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bb20723b161ccef109ac3f2c2673d6dd_JaffaCakes118
Size

42KB
MD5

bb20723b161ccef109ac3f2c2673d6dd
SHA1

a40c9e3e5cf8cf6b02c80b02e9ddd9882e415755
SHA256

d7501f87d30c7db3f9c89a441ac91e8c9b61b80740449d4f9fe0d7e73ae04d3b
SHA512

47161c29740d5150248a58d90da407b21ac87c46d55020181bb31ee7d03a91f5ee4ca89edffa422170a6e9f4f4a21456642deecb618d6f002e0ee1d6fc22f4d6
SSDEEP

768:l0uEqQfQ/8v6vkCNkgALe90QB6NhPj761YBXTC95kn3:OuEZfCcQUhPIWXK5kn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb20723b161ccef109ac3f2c2673d6dd_JaffaCakes118

Files

bb20723b161ccef109ac3f2c2673d6dd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

72392d3ff210bcd1582f413678340d00

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\Works\C++\Projects\OpenFlash\Release\openflash.pdb

Imports

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey

kernel32

InterlockedDecrement
GetCommandLineA
GetSystemDirectoryA
FindFirstFileA
CopyFileA
SetFileAttributesA
GetModuleFileNameA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72392d3ff210bcd1582f413678340d00

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

urlmon

shell32

advapi32

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 3KB - Virtual size: 3KB