d6983b359401ec61dafd9af77fe43a33_JaffaCakes118

General

Target

d6983b359401ec61dafd9af77fe43a33_JaffaCakes118
Size

15KB
MD5

d6983b359401ec61dafd9af77fe43a33
SHA1

9711376ec010ab0b23249b4a9f51d61d6acc0bdc
SHA256

6286abafa0df35ab04471dd4cc9fc33b757bf5a9e0d581bdb4935b4780cbea7d
SHA512

b6f0c17bc469281b16a38bf7b8e2ad33d86af7d0c5912a4b86d6c4050725abe60b757b25900cd84faba1662a3e94138108eedb67fffbf5316046bc0f8202adf1
SSDEEP

384:g5s7r4lHRyL/r4yLV1ZvVXNcMyx16AhNY4:g5sVL/Z1Z7cMO1rhN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6983b359401ec61dafd9af77fe43a33_JaffaCakes118

Files

d6983b359401ec61dafd9af77fe43a33_JaffaCakes118
.dll windows:4 windows x86 arch:x86

00ad2ba80111ef1aee2601149b76a1a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
GlobalFree
ReadProcessMemory
GlobalLock
DeleteFileA
VirtualProtectEx
CreateThread
GetCurrentProcess
CreateEventA
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
OutputDebugStringA
GetCommandLineA
VirtualAlloc
GetModuleHandleA
GetProcAddress
OpenProcess
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
GlobalAlloc

user32

GetAsyncKeyState
ToUnicode
GetKeyboardState
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
CheckMenuRadioItem
CheckRadioButton
CloseDesktop
CheckDlgButton
CheckMenuItem
GetCursor
GetDC
GetDCEx
GetDesktopWindow
DeleteMenu
DestroyCursor
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

gdi32

CloseEnhMetaFile
CancelDC
GetBkMode
Chord
DeleteObject

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
OpenProcessToken

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00ad2ba80111ef1aee2601149b76a1a2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 13KB - Virtual size: 12KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1024B - Virtual size: 874B

.text
Size: 13KB - Virtual size: 12KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1024B - Virtual size: 874B