fc6ed68f886024d0bf74b195cfe5de46_JaffaCakes118

General

Target

fc6ed68f886024d0bf74b195cfe5de46_JaffaCakes118
Size

12KB
MD5

fc6ed68f886024d0bf74b195cfe5de46
SHA1

8d1e32ac93e4ff2766b3d1eafcd5624cb232addd
SHA256

a84cd13f449c9602634e048b3b0e2f1d0924c8bd2d243b0fe22aafeb8eb5a5ee
SHA512

616f6a386380a8210e6bf1c03b7085522100b75840d5a52da77b2f93425ab37cfe4bc37a552fa1714b2c63b0a826f7ed0512638f4e792478a5fa93153d83dbb7
SSDEEP

192:9Nm6B0Y/xR7B52VOVm6hmpVWYHvn0QtWNe0vBn:zB02NVm6hRQt10l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc6ed68f886024d0bf74b195cfe5de46_JaffaCakes118

Files

fc6ed68f886024d0bf74b195cfe5de46_JaffaCakes118
.dll windows:4 windows x86 arch:x86

00352128e5b8d3c5d3702386aa104dec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrCatW
StrNCatW
StrStrIW
PathFindFileNameA
UrlGetPartW
PathRemoveExtensionA
StrStrIA
PathAddBackslashA

urlmon

URLDownloadToFileA
URLDownloadToCacheFileA
URLDownloadToCacheFileW

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

GetFileSize
WriteFile
GetWindowsDirectoryA
GlobalAddAtomA
GetProcessHeap
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapAlloc
lstrcpyA
DeleteFileA
CloseHandle
GetModuleFileNameA
GetPrivateProfileStringA
lstrcatA
ReadFile
GlobalFindAtomA
lstrlenA
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GetTickCount
DeleteFileW
CreateThread
CreateFileA
SetFilePointer
GetPrivateProfileIntA

user32

wsprintfW

shell32

ShellExecuteA

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00352128e5b8d3c5d3702386aa104dec

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

urlmon

wininet

kernel32

user32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 726B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 726B