dbf908afbd3f38eba038b361e4442c8b_JaffaCakes118

General

Target

dbf908afbd3f38eba038b361e4442c8b_JaffaCakes118
Size

18KB
MD5

dbf908afbd3f38eba038b361e4442c8b
SHA1

880de0d3e3c91692b4c7d3036c2f47bae2ee04b6
SHA256

a94bb94ad1d046f7ae402159e7330827d5f15e34ce180b8fb76f6414c6bd2c1c
SHA512

06b9cf4d7e59bcec097372eb775b06053ce9b4a5f4a49e649301aa1382834e9b48def5f3eb25f9793723a7a5f861168683688a0725ac4884ce74fd85645e7d98
SSDEEP

384:HDMIfFwgHenAzwwbASorS8RfzAoO32jGY+XomqYv:gIfFDuAEwbASo28OsGLXc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbf908afbd3f38eba038b361e4442c8b_JaffaCakes118

Files

dbf908afbd3f38eba038b361e4442c8b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3386d9b40f84e4ba6f1e1b4e29a0bdf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalUnlock
CloseHandle
ReadFile
GlobalLock
GlobalAlloc
GetFileSize
CreateFileA
RaiseException
InitializeCriticalSection
IsBadReadPtr
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GlobalFree
ReadProcessMemory
WriteProcessMemory
GetComputerNameA
TerminateThread
SetUnhandledExceptionFilter
GetCurrentThread
SetThreadContext
Sleep
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
CreateThread
GetCurrentProcessId
OpenMutexA
LoadLibraryA
CreateMutexA

user32

FindWindowA
GetWindowThreadProcessId
GetDesktopWindow
GetWindow
GetClassNameA
GetWindowTextA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx

msvcrt

_strlwr
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strnicmp
strcat
sprintf
strcpy
strrchr
strlen
strncpy
strchr
memcpy
memset
strstr
wcslen
??2@YAPAXI@Z

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3386d9b40f84e4ba6f1e1b4e29a0bdf7

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

wininet

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 2KB

sdt Size: 512B - Virtual size: 80B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 2KB

sdt
Size: 512B - Virtual size: 80B

.reloc
Size: 2KB - Virtual size: 1KB