ce7cc31ca946e2e475c91dca0c5b06f7_JaffaCakes118

General

Target

ce7cc31ca946e2e475c91dca0c5b06f7_JaffaCakes118
Size

15KB
MD5

ce7cc31ca946e2e475c91dca0c5b06f7
SHA1

8a2b4d484ece6676f8545d295902aabf3e7e7b76
SHA256

a99c61573299baeb51c859cba65ed74c21e19682723ae256a80461a9baf3ddfb
SHA512

73cd0da4849a6703b40020cee6d3e3008b96937142ad8130b50a6997cba02f64239308d305ac18c47c2f3e37a3beab2d49b10f6c42481d44fc9929065f8736c4
SSDEEP

192:cPdQ6uMAsUunTR0TjVNbW8h+p1/K3q0MHQU9HyX4SREN7DzktFoQEbIxB/zY:I/U8TGTj3WGIJypEJAtFoQEbIxNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce7cc31ca946e2e475c91dca0c5b06f7_JaffaCakes118

Files

ce7cc31ca946e2e475c91dca0c5b06f7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

59ccf82dafccc9e48e8bb1d2f08a2d79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualProtectEx
ReadProcessMemory
VirtualFreeEx
GlobalLock
GlobalAlloc
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
OutputDebugStringA
GetCurrentThread
GetCurrentProcessId
IsBadReadPtr
GetPrivateProfileStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
GlobalFree
VirtualAlloc
RtlUnwind

user32

UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
GetWindowTextA
DestroyWindow
GetCursor
DestroyMenu
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59ccf82dafccc9e48e8bb1d2f08a2d79

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 12KB - Virtual size: 12KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1024B - Virtual size: 878B

.text
Size: 12KB - Virtual size: 12KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1024B - Virtual size: 878B