1744dbdabf5a7584067720cfd4c94d09_JaffaCakes118

General

Target

1744dbdabf5a7584067720cfd4c94d09_JaffaCakes118
Size

38KB
MD5

1744dbdabf5a7584067720cfd4c94d09
SHA1

d363228f80d78f1775d79bd1fdf8818efcdfa352
SHA256

ce5f45fde8552146f9494f60761e2c0479790ecf6d191c3318ed6c9e9216284e
SHA512

d558c80254af4caeb8e7e3262592373035cd019f88a7232cfe070e5af955713065f103701b54fdd18560e47e4ed65e36f3486d3c20fd0c34fc976c839555ea85
SSDEEP

768:qhv9LMvUROl08YzNAlROK7x+PLnCqj6Foc:u1aURYYXKl4eo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1744dbdabf5a7584067720cfd4c94d09_JaffaCakes118

Files

1744dbdabf5a7584067720cfd4c94d09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

307a89cfa0a3e74bbc0aa6c6a82f508d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateFileA
DeleteFileA
CompareStringA
ReadFile
GetFileSize
lstrcmpA
Sleep
TerminateProcess
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
GetLastError
GetCurrentProcess
CreateProcessA
GetProcAddress
WriteProcessMemory
VirtualProtectEx
VirtualQueryEx
VirtualAllocEx
VirtualFreeEx
GetModuleHandleA
GetTickCount
CreateThread
WriteFile
ExitThread
WinExec
ExitProcess
CopyFileA
lstrcmpiA
GetModuleFileNameA
TerminateThread
WaitForSingleObject
LCMapStringA
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
WideCharToMultiByte
CloseHandle
GetVersion
lstrlenA
GetSystemDirectoryA
lstrcatA
GetWindowsDirectoryA
lstrcpyA
LoadLibraryA
GetStringTypeW
GetStringTypeA
GetStdHandle
MultiByteToWideChar
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
RtlUnwind
LCMapStringW

user32

PostThreadMessageA
GetWindowThreadProcessId
CreateWindowExA
RegisterClassA
DefWindowProcA
SetTimer
DispatchMessageA
TranslateMessage
GetMessageA
GetWindowTextA
EnumWindows
KillTimer
GetClassNameA
MessageBoxA
wsprintfA

advapi32

OpenProcessToken
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegQueryValueA
LookupPrivilegeValueA
AdjustTokenPrivileges

ws2_32

closesocket
recv
WSAStartup
connect
setsockopt
htonl
shutdown
accept
htons
WSAGetLastError
gethostbyname
socket
sendto
send
bind
inet_addr
listen

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
InternetReadFile

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

307a89cfa0a3e74bbc0aa6c6a82f508d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

wininet

Sections

.text Size: 34KB - Virtual size: 34KB

.data Size: 3KB - Virtual size: 9KB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 3KB - Virtual size: 9KB