034062fc58873d50b15e70feddb28934_JaffaCakes118

General

Target

034062fc58873d50b15e70feddb28934_JaffaCakes118
Size

15KB
MD5

034062fc58873d50b15e70feddb28934
SHA1

c399c77f051f72165368d9e89584ba20d21d9cce
SHA256

0aa306f790c4cb509162f9c4759666126926007df06d8b6ad1665844c14d860d
SHA512

f13734627ae6930235b7429031f32016b35647c34858874b47d9e9ea6661faed39b7c57b058c83235879b9357b88f267faeb2642719b85c923ba794a063cee4d
SSDEEP

192:zRPdQR6MZPAI0TlXTDpVoApaOTGI21ugyXHIzQIdHy7x7S8L1DEzo9aTT:9YAI0TVTDzoAaVGuyR1ozo9ST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
034062fc58873d50b15e70feddb28934_JaffaCakes118

Files

034062fc58873d50b15e70feddb28934_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6f8eb2f49bb8205ccb06b70891b98f74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualProtectEx
ReadProcessMemory
GlobalFree
GlobalLock
OpenProcess
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
OutputDebugStringA
GetCurrentThread
GetCurrentProcessId
FreeLibrary
IsBadReadPtr
GetPrivateProfileStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
GlobalAlloc
VirtualAlloc
RtlUnwind

user32

UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
FindWindowA
GetWindowTextA
GetCursor
GetDC
GetDCEx
GetDesktopWindow
DestroyWindow
DestroyMenu
wsprintfA
GetMessageA
PostThreadMessageA
GetInputState

gdi32

GetBkMode
GetBkColor

advapi32

RegCreateKeyExA
OpenProcessToken
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f8eb2f49bb8205ccb06b70891b98f74

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

Sections

.text Size: 13KB - Virtual size: 12KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1024B - Virtual size: 914B

.text
Size: 13KB - Virtual size: 12KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1024B - Virtual size: 914B