ce26145e98667ffad2548f242f0b0afc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce26145e98667ffad2548f242f0b0afc_JaffaCakes118
Size

15KB
MD5

ce26145e98667ffad2548f242f0b0afc
SHA1

80d0c919bb474ea2257871b7545c36cc62199a9c
SHA256

c2213120387b95d8eac194dec1d10b61e5f3098218f9985e95b373537d674c12
SHA512

3be924cc324b1df9a049b9f1cf9869589ecdff61c577d0759c69eb566bb07b873f8d63641297dea384e0c2b47b6ec63577ec99a95f1f7cd08493e6623f3c2c82
SSDEEP

192:R4wakg7b4fGyBv3dn4GkwkSwFpcmx5Iw8MYkNxxn6vGThXFDVDq:Rjg7b4+yRx49sw9XbhOvGThR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce26145e98667ffad2548f242f0b0afc_JaffaCakes118

Files

ce26145e98667ffad2548f242f0b0afc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

870fb3a205ea63c2a6f3c4d46061b9a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

iphlpapi

GetAdaptersInfo

advapi32

GetUserNameA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

kernel32

AddAtomA
AllocConsole
CloseHandle
CopyFileA
CreateFileA
CreateThread
ExitProcess
FindAtomA
FindFirstFileA
FreeConsole
GetAtomNameA
GetCommandLineA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
GetStartupInfoA
MoveFileExA
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
WaitForMultipleObjects
WriteFile
lstrcatA
lstrcpyA
lstrlenA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
free
fwrite
getenv
malloc
memset
signal
sprintf
strcat
strcmp
strlen
time

shell32

ShellExecuteA

user32

CreateWindowExA
DispatchMessageA
FindWindowA
GetAsyncKeyState
GetMessageA
RegisterClassA
RegisterDeviceNotificationA
ShowWindow
TranslateMessage

wininet

HttpAddRequestHeadersA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

870fb3a205ea63c2a6f3c4d46061b9a3

Headers

File Characteristics

Imports

iphlpapi

advapi32

kernel32

msvcrt

shell32

user32

wininet

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 80B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 224B

.idata Size: 2KB - Virtual size: 2KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 80B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 224B

.idata
Size: 2KB - Virtual size: 2KB