de66c0e762874e763f693625c952d0ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

de66c0e762874e763f693625c952d0ed_JaffaCakes118
Size

76KB
MD5

de66c0e762874e763f693625c952d0ed
SHA1

a4dfd122d9d4993e0a7453fda70b0e9014bf1913
SHA256

171b622e1a48ff57d155ac60c702b5e929d9561b42cefdf121bf5839ce799353
SHA512

3b7001ff793d5bd49de37606a5b8b01fd3e7d6ba776067e07ef354ab9106a3b05741b770a43941cb94fc8ee5ec1bc7b450ac16099375e1bea77a69f1e3c3f4fd
SSDEEP

1536:RWuHTfRwIDc+gwHWk/FFDirtB1kQ4ochY:AuHTfR1JHT/wP1kQ4och

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de66c0e762874e763f693625c952d0ed_JaffaCakes118

Files

de66c0e762874e763f693625c952d0ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1303bd110e2b8fd3b279ae44cbbc27d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\VC\Peep\Release\Peep.pdb

Imports

ws2_32

inet_ntoa
gethostname
WSAGetLastError
WSACleanup
send
connect
htons
gethostbyname
WSAAsyncSelect
socket
closesocket
recv
WSAStartup

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState

shlwapi

SHDeleteKeyA
SHCopyKeyA
SHDeleteValueA

kernel32

GetSystemInfo
GlobalMemoryStatus
GetVolumeInformationA
GetLocalTime
CloseHandle
CreateThread
GetTickCount
SetLocalTime
GetLastError
GetLogicalDrives
GetLogicalDriveStringsA
GetDriveTypeA
SetComputerNameA
SetFileAttributesA
RemoveDirectoryA
CreateFileA
GetFileSize
CopyFileA
DeleteFileA
SetFilePointer
WriteFile
CreateDirectoryA
ReadFile
GetTempPathA
GetTempFileNameA
GetModuleHandleA
GetModuleFileNameA
CreateToolhelp32Snapshot
Process32First
OpenProcess
GetPriorityClass
Process32Next
Module32First
Module32Next
GetWindowsDirectoryA
GetSystemDirectoryA
SetEndOfFile
CreateProcessA
WaitForSingleObject
GetVersionExA
LoadLibraryA
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetCurrentProcess
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Beep
HeapAlloc
HeapReAlloc
HeapFree
TerminateProcess
lstrcmpA
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
GetCommandLineA
GetStartupInfoA
ExitProcess
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
MoveFileA
GetComputerNameA
GetSystemDefaultLCID
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
VirtualFree
VirtualAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
VirtualQuery
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
HeapSize
RtlUnwind
CompareStringA
CompareStringW
Sleep
SetEnvironmentVariableA
FreeEnvironmentStringsW

user32

EnumWindows
SendMessageA
GetWindowThreadProcessId
GetClassNameA
DefWindowProcA
PostQuitMessage
MessageBoxA
ReleaseDC
DrawTextA
LoadStringA
PostMessageA
SetRect
GetDesktopWindow
SetCursorPos
GetDC
ExitWindowsEx
GetCursorPos
KillTimer
SetTimer
EnumDisplaySettingsA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
wsprintfA
mouse_event
keybd_event
MapVirtualKeyA
GetClientRect

gdi32

GetDIBits
RealizePalette
CreateDCA
CreateCompatibleDC
GetStockObject
SelectObject
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
DeleteObject
SelectPalette
GetObjectA

advapi32

GetUserNameA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyA

shell32

ShellExecuteA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1303bd110e2b8fd3b279ae44cbbc27d8

Headers

File Characteristics

PDB Paths

Imports

ws2_32

wininet

shlwapi

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 1KB