0ab51a4e0f0330172ca29570ff5ed748_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0ab51a4e0f0330172ca29570ff5ed748_JaffaCakes118
Size

13KB
MD5

0ab51a4e0f0330172ca29570ff5ed748
SHA1

3c700cd41f9fcccef2a4cc7bc6dd72be4a94fe65
SHA256

ef3a44b4c32e3f22403af92d9d234ba2b8215f82abf4f803e9b5ccda88c1bc83
SHA512

209076879b4a839eeeef2ea1d6bfc05e738bee91c9125b28e19221133ac50bcacd2f6aa19c9ea2112cbd0b387003a34bd658b8e932d67fc660a0f217265b2984
SSDEEP

384:ZI6cmgy16Ks8+T5LisENTzECprQ9Tl0x2S1buK:66cFy1BZcOtVzE6rQ92x2kaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ab51a4e0f0330172ca29570ff5ed748_JaffaCakes118

Files

0ab51a4e0f0330172ca29570ff5ed748_JaffaCakes118
.exe windows:4 windows x86 arch:x86

924a88e6f29ff37046c001bd4b99e7e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
CreateToolhelp32Snapshot
GetLastError
GetCurrentProcess
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
WinExec
GetTempFileNameA
GetTempPathA
Sleep
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
SetFileAttributesA
OutputDebugStringA
GetPrivateProfileStringA
GetWindowsDirectoryA
ExitProcess
ResumeThread
CreateProcessA
lstrcmpiA
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
MoveFileExA
GetModuleHandleA
SetEvent
CreateEventA
OpenEventA
WritePrivateProfileStringA
FreeLibrary
CopyFileA
GetFileAttributesA
CreateDirectoryA
GetCurrentThreadId
CreateThread
GetStartupInfoA
Process32Next
DeleteFileA
CreateFileA
WriteFile
CloseHandle
SetThreadPriority
lstrcpyW

user32

MapVirtualKeyA
wsprintfA
GetThreadDesktop

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyA

wininet

InternetSetOptionA
InternetConnectA
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetCrackUrlA
DeleteUrlCacheEntry
HttpOpenRequestA

shlwapi

PathRemoveFileSpecA

msvcrt

_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
atol
free
malloc
_except_handler3
strrchr
_itoa
atoi
sprintf
_exit

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

924a88e6f29ff37046c001bd4b99e7e9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

shlwapi

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 948B

.rsrc Size: 1024B - Virtual size: 808B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 948B

.rsrc
Size: 1024B - Virtual size: 808B