fdbd87aab1358421d8b8b863fed96c48_JaffaCakes118

General

Target

fdbd87aab1358421d8b8b863fed96c48_JaffaCakes118
Size

22KB
MD5

fdbd87aab1358421d8b8b863fed96c48
SHA1

c3c5e37219f83d3fbcaeb50492fe563cd56cbc82
SHA256

4748168c3fd8bee41f4a45d3791d1633d04c46ee4089b0eb381af3d915355747
SHA512

f2676458745d85bc0f1b33042ab53d05e6bbd42332576dd3bc6596bdf3c19ad876e2a1c1fdb2bfd35e4c546b1f5fa5775aab8e8f7029ca8d05dd362771ba4160
SSDEEP

384:WohD2wP0jBqgccxFgjNxuXs3IAZir+9Myy6EIkyzM:9hD2XcjOXs3IAZjMkEIkmM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdbd87aab1358421d8b8b863fed96c48_JaffaCakes118

Files

fdbd87aab1358421d8b8b863fed96c48_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8085e0d33ac14c4fdf62031c77fb5011

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualFreeEx
TerminateProcess
WideCharToMultiByte
ReadProcessMemory
GlobalFree
GlobalLock
GlobalAlloc
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
GetPrivateProfileStringA
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
VirtualProtectEx
VirtualAlloc

user32

UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8085e0d33ac14c4fdf62031c77fb5011

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 19KB - Virtual size: 18KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB