105468d1e3c33ff112af72772835ee70_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

105468d1e3c33ff112af72772835ee70_JaffaCakes118
Size

344KB
MD5

105468d1e3c33ff112af72772835ee70
SHA1

718ddbcd66b0e2513b4fe20a711cb817a2b65af5
SHA256

5e522bc43a47d84e984469a8ce12262095066ee40cb73f11f25fc94cd106e967
SHA512

22f819502c31a48a571011efc1faf6012b810a9caf4430266f6b54b0a58cfce9c8bfe5235c27daf39b82d5a44e18c2ff3c5de72141e09a8bda7be46cb64adfe7
SSDEEP

3072:b+JRoaEecYueYFVVA+HvtZDmSrbyHTNRLwZfUi3DfdEfseulksZa:b+JRorecYueYFbLyHTLmMi3TGfR9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
105468d1e3c33ff112af72772835ee70_JaffaCakes118

Files

105468d1e3c33ff112af72772835ee70_JaffaCakes118
.dll .js windows:4 windows x86 arch:x86 polyglot

feaa3dc8a7f2661780e3b4762235c6dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTempPathA
ReadFile
GetFileSize
CreateFileA
Thread32Next
TerminateThread
Thread32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GlobalUnlock
CreateEventA
OpenEventA
GetCommandLineA
GetWindowsDirectoryA
WideCharToMultiByte
Process32Next
Process32First
GetVersionExA
ExitThread
lstrlenW
FreeLibrary
CreateProcessA
VirtualAlloc
VirtualFree
GetCurrentThreadId
FlushFileBuffers
GetSystemDirectoryA
DeviceIoControl
GetCPInfoExA
GetACP
SetEndOfFile
SetConsoleTitleW
SetComputerNameW
ResumeThread
DisableThreadLibraryCalls
GetLastError
WriteProcessMemory
VirtualProtectEx
VirtualFreeEx
Sleep
CreateRemoteThread
VirtualAllocEx
WriteFile
TerminateProcess
GlobalAlloc
GlobalLock
GetModuleHandleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
SetFilePointer
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapCreate
HeapDestroy
GetEnvironmentVariableA
RaiseException
HeapFree
HeapAlloc
GetVersion
RtlUnwind
GetSystemTime
GetTimeZoneInformation
LocalFree
GetProcAddress
GlobalFree
OutputDebugStringA
SetThreadPriority
DeleteFileA
SetErrorMode
OpenProcess
ReadProcessMemory
ExitProcess
IsBadReadPtr
MultiByteToWideChar
OutputDebugStringW
GetModuleFileNameA
GetCurrentProcess
CreateThread
CloseHandle
GetLocalTime
WaitForSingleObject
GetTickCount

user32

EnumChildWindows
wsprintfA
GetWindowThreadProcessId
PostMessageA
GetWindowTextA
EnumWindows
wsprintfW
GetClassNameA
SendMessageTimeoutA
RegisterWindowMessageA
EnumThreadWindows
GetMessageA
PostThreadMessageA
GetInputState
GetCursor
ClipCursor

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenW
InternetOpenA
InternetOpenUrlW
HttpQueryInfoA
InternetReadFile

ws2_32

getpeername
inet_ntoa

gdi32

GetBkColor
GetBkMode
GetPixel

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegCloseKey
CloseServiceHandle
ControlService
OpenServiceA
DeleteService
OpenSCManagerA
OpenProcessToken

ole32

CoInitialize
CoUninitialize

oleaut32

SysStringLen
VariantClear
SysAllocStringLen
SysFreeString

Exports

Exports

WSHAddressToString
WSHEnumProtocols
WSHGetBroadcastSockaddr
WSHGetProviderGuid
WSHGetSockaddrType
WSHGetSocketInformation
WSHGetWSAProtocolInfo
WSHGetWildcardSockaddr
WSHGetWinsockMapping
WSHIoctl
WSHJoinLeaf
WSHNotify
WSHOpenSocket
WSHOpenSocket2
WSHSetSocketInformation
WSHStringToAddress

Sections

.text
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

feaa3dc8a7f2661780e3b4762235c6dd

Headers

File Characteristics

Imports

kernel32

user32

wininet

ws2_32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 229KB - Virtual size: 229KB

.pata Size: 19KB - Virtual size: 19KB

.uata Size: 19KB - Virtual size: 19KB

.rata Size: 19KB - Virtual size: 19KB

.zata Size: 19KB - Virtual size: 19KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 229KB - Virtual size: 229KB

.pata
Size: 19KB - Virtual size: 19KB

.uata
Size: 19KB - Virtual size: 19KB

.rata
Size: 19KB - Virtual size: 19KB

.zata
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 16KB - Virtual size: 16KB