d450e86912aeeb8f1b64e754781bd89f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d450e86912aeeb8f1b64e754781bd89f_JaffaCakes118
Size

103KB
MD5

d450e86912aeeb8f1b64e754781bd89f
SHA1

c065101cfff88563b7a8d04de1a5e56f1c074265
SHA256

960709a0367e9cced38efd5aec2a680a3fa149515f3db3a1362f5f7891de9519
SHA512

856b32fd516d0fcc82ebd2d964e7c39a59dfc8c4de6650747d328cf92cdc4418e08d8b2cdde7882d997e70cb8084bf315505103cc4171204444c75eaed7b3a9b
SSDEEP

1536:u67Vs8cihH+mySJieMdf5tD7wHt6YHwIY9Sznx8ttVwizA4l0OorvIdl34yHjBqk:t+f5i7E9SlWtVAO0OcvIdl34yHjBqJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d450e86912aeeb8f1b64e754781bd89f_JaffaCakes118

Files

d450e86912aeeb8f1b64e754781bd89f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0161eb29b8569cc500797bd3de4bb8c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
ReadProcessMemory
GetThreadContext
CreateProcessA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
GetProcAddress
GetModuleHandleA
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
GetModuleFileNameA
Sleep
CreateThread
DeleteFileA
CloseHandle
MoveFileExA
lstrlenA
WriteFile
CreateFileA
GetTickCount
GetTempPathA
LoadLibraryA
GetWindowsDirectoryA
WinExec
SetFileAttributesA
GetLastError
ReleaseMutex
OpenMutexA
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
ExitProcess
CreateMutexA
ReadFile
lstrcmpiA
GetSystemDirectoryA
GetCurrentThreadId
CreateDirectoryA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
ExitThread
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersion
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
HeapFree
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
SetEndOfFile
FlushFileBuffers
HeapReAlloc

shell32

ShellExecuteA

ws2_32

WSAStartup
send
htons
__WSAFDIsSet
recv
socket
connect
closesocket
select
WSAIoctl
gethostbyname
inet_addr
sendto
setsockopt
WSASocketA
htonl

wininet

InternetCloseHandle
InternetOpenUrlA

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0161eb29b8569cc500797bd3de4bb8c9

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

wininet

Sections

.text Size: 66KB - Virtual size: 66KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 18KB - Virtual size: 23KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 66KB - Virtual size: 66KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 18KB - Virtual size: 23KB

.rsrc
Size: 10KB - Virtual size: 9KB