121fa326f927ebdbbd5ff2b68a204521_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

121fa326f927ebdbbd5ff2b68a204521_JaffaCakes118
Size

44KB
MD5

121fa326f927ebdbbd5ff2b68a204521
SHA1

79b117830a618ddc35adf689ab82e19c386eee8b
SHA256

19a690aa11517536730bd07009deb692887155f03ee3ecf573ed691e32a37b93
SHA512

400fd540ad3d4afae867b1a5caf91d8300dffc49c4f866283638779816f4475310cfbe36ed8e4d9e2b940d1a6d11c96623cb7eeb8e66b2ab4f4a52ca63408f42
SSDEEP

768:2NO8E7YIXwGur7YCulTJ1BROXBbCC888zDxJahf:2Q8VIXwGuIzl1lOXBuzJSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121fa326f927ebdbbd5ff2b68a204521_JaffaCakes118

Files

121fa326f927ebdbbd5ff2b68a204521_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea49687f69922171d076d2d1b2c7c7ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

mfc42

ord4129
ord5683
ord1575
ord6930
ord356
ord2770
ord2781
ord4058
ord3185
ord3181
ord1980
ord668
ord535
ord354
ord825
ord802
ord800
ord3790
ord665
ord540
ord860
ord941
ord5622
ord823
ord537
ord2818
ord4277
ord858
ord6779
ord6877
ord542
ord5601
ord1085

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_stricmp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_snprintf
strncat
_strlwr
memmove
__p___argc
__p___argv
strncpy
_splitpath
isdigit
srand
rand
strchr
sprintf
_mbsicmp
atol
__CxxFrameHandler
??0exception@@QAE@ABQBD@Z
__setusermatherr

kernel32

GetModuleHandleA
Sleep
GetModuleFileNameA
GetVersionExA
LoadLibraryA
GetProcAddress
GlobalFree
GlobalAlloc
OpenProcess
GetPrivateProfileStringA
WinExec
GetStartupInfoA
DeleteFileA
MoveFileExA
GetTickCount
CopyFileA
GetSystemDirectoryA
DeviceIoControl
CreateFileA
GetLastError
FreeLibrary
CloseHandle

user32

IsCharAlphaA

advapi32

DeleteService
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
OpenSCManagerA

shell32

ShellExecuteA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

msvcp60

??0out_of_range@std@@QAE@ABV01@@Z
??_7out_of_range@std@@6B@
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1out_of_range@std@@UAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0logic_error@std@@QAE@ABV01@@Z

netapi32

Netbios

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ea49687f69922171d076d2d1b2c7c7ee

Headers

File Characteristics

Imports

shlwapi

wininet

mfc42

msvcrt

kernel32

user32

advapi32

shell32

version

msvcp60

netapi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 4KB