bcd4b180675fe53cbc8e0b4433f09885_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bcd4b180675fe53cbc8e0b4433f09885_JaffaCakes118
Size

60KB
MD5

bcd4b180675fe53cbc8e0b4433f09885
SHA1

510a1fb4361345e27560130cec23c0338c357655
SHA256

c62cd8e003a52fb3aa7d9b8b9761765b33514ae675c479787d9070d35278a812
SHA512

7c1658c9ada9f9d6f5d088c952836ec8df36c09f08aca930889c41ae91e504b95dd17c3ecb3c578f12072812610367da1c0f84421a664b2cb1ab52af09e7a244
SSDEEP

768:NmpjtLBafm+ZEHnvX0yNPqb5rGVhEApI2dvrKzw/UucGG8CdHLSnGDS:NURBafjZkPG5ruEA3DKM/BMHFDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcd4b180675fe53cbc8e0b4433f09885_JaffaCakes118

Files

bcd4b180675fe53cbc8e0b4433f09885_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b71bbcf874bea859bff7434c38338f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
ReadFile
CreateFileA
lstrcatA
lstrcmpiA
GetVersionExA
GetSystemDefaultLangID
GetVersion
FreeLibrary
GetProcAddress
LoadLibraryA
CreateThread
Process32First
WriteFile
TerminateProcess
OpenProcess
WaitForSingleObject
ReleaseMutex
GetLastError
CreateMutexA
FlushFileBuffers
LCMapStringW
LCMapStringA
GetSystemInfo
Process32Next
CloseHandle
GetSystemDirectoryA
lstrcpyA
lstrlenA
Sleep
VirtualProtect
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetStdHandle
VirtualQuery
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
ExitProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
SetFilePointer

user32

TranslateMessage
DispatchMessageA
GetMessageA

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

wininet

InternetCloseHandle
InternetConnectA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetSetOptionA
InternetOpenA
HttpOpenRequestA
InternetReadFile

ws2_32

WSAStartup
gethostname

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9b71bbcf874bea859bff7434c38338f3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

wininet

ws2_32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 7KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 7KB