f987f42895858b149b93bf3ff294234a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f987f42895858b149b93bf3ff294234a_JaffaCakes118
Size

88KB
MD5

f987f42895858b149b93bf3ff294234a
SHA1

b3ab565c70e44ac399d8e1e4b6b521c7b0dfbfd5
SHA256

9cab11279e0564c49b8d81bb156a756a0418c914743193b9f392a587b91b165f
SHA512

bc747633a59a11c3dbce94f911f691ee0e435947942ed1aba8b369ffab80d2901953dec6832207419262a880597bbb50f45d72d9a5e67d774e76988a20b6a741
SSDEEP

1536:3G5eDiuRAl8+8gmARhcyCiFch2yufSyqAPdzLUtB55555s:3GIDiuRcVHcwFYIh4tB55555

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f987f42895858b149b93bf3ff294234a_JaffaCakes118

Files

f987f42895858b149b93bf3ff294234a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92941d7e791bb9797fbe62e49933fd29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMonitorInfoA
GetSysColorBrush
GetDoubleClickTime
GetKeyboardType
GetSysColor
LoadImageA

advapi32

LookupAccountSidA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegCloseKey
OpenProcessToken
RegOpenKeyExA
RegGetKeySecurity
GetTokenInformation

psapi

GetModuleInformation

ws2_32

htonl
WSAStartup

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

netapi32

NetUserGetInfo
NetApiBufferFree

kernel32

GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetShortPathNameA
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
VirtualAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
GetProcessPriorityBoost
GetVolumeInformationA
CreateDirectoryA
GetFileTime
GetFirmwareEnvironmentVariableA
GetSystemDirectoryA
OpenProcess
GetEnvironmentStrings
GetStdHandle
GetFileType
GetTickCount
Sleep
SetErrorMode
GetCommandLineA
GetVersion
CloseHandle
GetCurrentProcess
WriteFile
CreateFileA
ExitProcess
CreateMutexA
OpenMutexA
CreateProcessA
GetEnvironmentVariableA
MultiByteToWideChar
GetModuleFileNameA
SetEnvironmentVariableA
CopyFileA
SetFileAttributesA
GetLastError
CreateThread
GetLocalTime
GetDriveTypeA
GetLogicalDriveStringsA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TerminateProcess
RtlUnwind
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
LoadLibraryA

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

92941d7e791bb9797fbe62e49933fd29

Headers

File Characteristics

Imports

user32

advapi32

psapi

ws2_32

wininet

netapi32

kernel32

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 31KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 31KB