d5c2c70a9959b1e84f7c44f12cf45a7c_JaffaCakes118

General

Target

d5c2c70a9959b1e84f7c44f12cf45a7c_JaffaCakes118
Size

15KB
MD5

d5c2c70a9959b1e84f7c44f12cf45a7c
SHA1

10ca39743e04631e27c372491c609824e679c568
SHA256

9cf170982ffef82f4970c7d40830f8757dcfd785998d12774d7fdebbd32f9ba6
SHA512

760f048d4a20e8c9366ac786eb58d9f27363132b43618a0f97732bad1585ddcf760f8bf2a0d7fe10304a975da208ff591f11c1d526f8f9361f946f28938b4119
SSDEEP

192:rUPOzMzUfnrOqmI8gxzr9Yc6uDocmM8ZQcZ81PySgiyu1mh1FkbEhwj:rQOA8rPmI8gxzhYaLBwGBgiM1FNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c2c70a9959b1e84f7c44f12cf45a7c_JaffaCakes118

Files

d5c2c70a9959b1e84f7c44f12cf45a7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

358b7dd91e974f3075e49862d12a8b8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualProtectEx
ReadProcessMemory
GlobalFree
OpenProcess
GlobalLock
GlobalAlloc
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
CopyFileA
GetCurrentThread
GetCurrentProcessId
GetPrivateProfileStringA
GetPrivateProfileIntA
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
OutputDebugStringA
VirtualAlloc

user32

UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetDC
GetCursor
GetDCEx
GetDesktopWindow
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

gdi32

GetBkMode
GetBkColor

advapi32

RegCreateKeyExA
OpenProcessToken
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

358b7dd91e974f3075e49862d12a8b8c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 13KB - Virtual size: 12KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1024B - Virtual size: 1000B

.text
Size: 13KB - Virtual size: 12KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1024B - Virtual size: 1000B