d1c7d8e1d6fd9791078ce6f9ac36cd6f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d1c7d8e1d6fd9791078ce6f9ac36cd6f_JaffaCakes118
Size

76KB
MD5

d1c7d8e1d6fd9791078ce6f9ac36cd6f
SHA1

ecd1e4794bad73307507922220c0447d52a46e0d
SHA256

c225d2c6c14ac54a10e66ab4b739aa6be58e2d8f408bd035510b5f14a3c42f58
SHA512

43b7ca8bc85a5d4c37b1da313596cb912c674692ec5ffbac5e46056abe28fd184d18656807bb1174873c4282da27d55e3691ada940bcdfffd94d4e884bfe5238
SSDEEP

1536:AMt5WJCQpGnK7VTvA2rnbyPt+6w1t0yZxVomt:A7z+8fDbntZxVomt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1c7d8e1d6fd9791078ce6f9ac36cd6f_JaffaCakes118

Files

d1c7d8e1d6fd9791078ce6f9ac36cd6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c472d956dd8e93e5d817536c413863b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenUrlW
InternetReadFile
InternetCloseHandle
InternetAttemptConnect
InternetGetConnectedState
InternetOpenW

kernel32

GetFileTime
CloseHandle
Sleep
ResumeThread
FileTimeToSystemTime
lstrcpyW
GetModuleFileNameW
CreateFileW
DeleteFileW
GetSystemTime
GetSystemDirectoryW
CopyFileW
WriteFile
GetLastError
ExitProcess
SetCurrentDirectoryW
SetWaitableTimer
CreateWaitableTimerW
WaitForSingleObject
GetTickCount
CreateThread
OpenWaitableTimerW
WriteConsoleW
GetConsoleOutputCP
SetFileTime
lstrcatW
GetLocalTime
SystemTimeToFileTime
GetCurrentDirectoryW
CreateProcessW
HeapSize
CreateFileA
FlushFileBuffers
GetTimeZoneInformation
GetProcAddress
WriteConsoleA
SetStdHandle
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer

user32

CharLowerW

advapi32

RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenSCManagerW
DeleteService
CloseServiceHandle
SetServiceStatus
CreateServiceW
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW

ole32

OleUninitialize
CoCreateInstance
OleInitialize
CLSIDFromProgID

oleaut32

VarBstrCat
VariantClear
SysAllocString
SysFreeString

iphlpapi

GetIfTable

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c472d956dd8e93e5d817536c413863b1

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

ole32

oleaut32

iphlpapi

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 38KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 38KB