bbd4830afcec55f188b0890dc54f4429_JaffaCakes118

General

Target

bbd4830afcec55f188b0890dc54f4429_JaffaCakes118
Size

34KB
MD5

bbd4830afcec55f188b0890dc54f4429
SHA1

69f925103b40b55d5637eb4b58c522911af2c53c
SHA256

b89b7a93a2bd692d33bd72c953e15e5151d8384d71eb38fda192ea1d48ae3d08
SHA512

d4e9d8207d7e4623000432a5c7921216733739d3460a3dc70d4416bbc81cb180804e1bfac8d746d6057ab7d827d6dd25881276f01f4998fc872d5087efcb4992
SSDEEP

384:l4/6RUG60MhS02Ja8OmzFJ7VMWkHZNa6QGJeNzbBBIQO3:l4CRFM6KmzF35eZNUBIL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbd4830afcec55f188b0890dc54f4429_JaffaCakes118

Files

bbd4830afcec55f188b0890dc54f4429_JaffaCakes118
.dll windows:4 windows x86 arch:x86

08e5bc541d392c132cc3d84ad86ca14d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
GetCurrentThreadId
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
GetFileSize
ReadFile
VirtualProtectEx
GlobalFree
GetCurrentProcess
SetThreadPriority
IsBadReadPtr
GlobalUnlock
VirtualAlloc
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
ExitProcess
WinExec
GetTempPathA
TerminateProcess
GetPrivateProfileStringA
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
ReadProcessMemory
CloseHandle

user32

UnhookWindowsHookEx
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState
CallNextHookEx
SetWindowsHookExA

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

urlmon

URLDownloadToFileA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08e5bc541d392c132cc3d84ad86ca14d

Headers

File Characteristics

Imports

kernel32

user32

wininet

urlmon

advapi32

Sections

.text Size: 31KB - Virtual size: 30KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 30KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 2KB - Virtual size: 1KB