ffb5b5510291b00625840f65a08729cb_JaffaCakes118

General

Target

ffb5b5510291b00625840f65a08729cb_JaffaCakes118
Size

31KB
MD5

ffb5b5510291b00625840f65a08729cb
SHA1

d91b901d40c998f0cc24e8f15313b5e6e45c34d9
SHA256

ec5c10e0eca858020e204461ef65b32e5929625eadf915b8eb6d062cf3e87cdc
SHA512

2bb7be68036bdbba4200e6caf86656222998907a2c1f0db862859d795395c07da743c89e0a69ebd0a3252f65f5539e55389cceb2f6e156ecbdd457a63aa3c91d
SSDEEP

384:AMYu80U3cLjbl56LPo1KClzui6yAFjP24UIQcshn:Hb8IjOLPglD6P24UINs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb5b5510291b00625840f65a08729cb_JaffaCakes118

Files

ffb5b5510291b00625840f65a08729cb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

07f42dfe4c14b8b88b5133440807779e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
GetCurrentThreadId
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
GetFileSize
ReadFile
GlobalFree
ReadProcessMemory
GetCurrentProcess
SetThreadPriority
IsBadReadPtr
GlobalUnlock
VirtualAlloc
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
ExitProcess
TerminateProcess
GetPrivateProfileStringA
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
VirtualProtectEx
CloseHandle

user32

UnhookWindowsHookEx
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState
SetWindowsHookExA
CallNextHookEx

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07f42dfe4c14b8b88b5133440807779e

Headers

File Characteristics

Imports

kernel32

user32

wininet

advapi32

Sections

.text Size: 27KB - Virtual size: 27KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 27KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 2KB - Virtual size: 1KB