e1992c1ed9b24da68f22c832cb2ca42c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e1992c1ed9b24da68f22c832cb2ca42c_JaffaCakes118
Size

20KB
MD5

e1992c1ed9b24da68f22c832cb2ca42c
SHA1

b1515142a4271209f1ee84de1c61e220a9a32dcb
SHA256

30ef78efb4a03bf54391f4936b5cde5b78c37422369bd6a80835ab5accde289d
SHA512

b3237a0335a7bd05eedb837490626e5ab2cb555bb7b34ba99f9350801e579d194f095034a0e7991dbe7e8faaa2f3c9a315aa5308c398792386369c971ef1d652
SSDEEP

384:cdn7BN95D+43jGDP7izh1zJbxFOvozvLRTI8:mD90ujI7iV3gojNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1992c1ed9b24da68f22c832cb2ca42c_JaffaCakes118

Files

e1992c1ed9b24da68f22c832cb2ca42c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

69c4eaf2743335dccce228624aeb5ab2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

htons
inet_addr
gethostbyname
recv
inet_ntoa
WSAStartup
ioctlsocket
send
socket
connect
WSACleanup
closesocket

user32

SetClipboardData
CloseClipboard
keybd_event
VkKeyScanA
SetFocus
EmptyClipboard
OpenClipboard
SetForegroundWindow
wsprintfA
BlockInput
ShowWindow

advapi32

EnumServicesStatusA
CloseServiceHandle
OpenProcessToken
ImpersonateLoggedOnUser
OpenSCManagerA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

fopen
_onexit
__dllonexit
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
rand
srand
strncpy
strstr
malloc
time
fclose
fwrite
strtok
atoi
free
_initterm
_adjust_fdiv

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit

psapi

GetModuleBaseNameA
EnumProcessModules
EnumProcesses

kernel32

GetLocaleInfoA
CreateThread
CreateProcessA
LoadLibraryA
GetProcAddress
lstrcpyA
lstrlenA
lstrcmpA
lstrcpynA
CreateMutexA
GlobalUnlock
OpenProcess
lstrcmpiA
Sleep
GetTickCount
InterlockedDecrement
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
DisableThreadLibraryCalls
MultiByteToWideChar
GetLastError
CloseHandle

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69c4eaf2743335dccce228624aeb5ab2

Headers

File Characteristics

Imports

wsock32

user32

advapi32

wininet

msvcrt

ole32

oleaut32

psapi

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 788B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 788B