38b45dc41fcb5e1931f15cc64d7460b4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

38b45dc41fcb5e1931f15cc64d7460b4_JaffaCakes118
Size

51KB
MD5

38b45dc41fcb5e1931f15cc64d7460b4
SHA1

d85716312efb06d1e8f3bbf1830823389a4bbe5f
SHA256

634a151ef6af536f7dd6cfb797f5bae282ddd7063afbbf8d8eb49cd26a9f9b42
SHA512

4f74fb40ecc5227927774ca2e97234a94f42a806012f1ac7748fb5c3f7f78d592c8ccb57b036b9d8fd6595d2dbc147a878879e1e58c0a824a299ec71f4fe4717
SSDEEP

768:5tXAvsVO22jbimdDxXCigvcRkYRn+9dzXaAoTWvd1:72sVO2+DNCiccf+Djoyz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b45dc41fcb5e1931f15cc64d7460b4_JaffaCakes118

Files

38b45dc41fcb5e1931f15cc64d7460b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6afd79303916ab5409758e0ace605cf1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket
connect
socket
htons
send
select
inet_addr
gethostbyname
WSAStartup
recv
WSACleanup

shell32

ShellExecuteA

advapi32

RegSetValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

kernel32

LocalFree
FlushFileBuffers
SetStdHandle
RaiseException
GetProcAddress
GetOEMCP
GetFileType
GetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
LoadLibraryA
ExitThread
GetTempPathA
GetLocaleInfoA
ExitProcess
lstrlenA
CreateThread
Sleep
GetTickCount
SetFileAttributesA
CopyFileA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
GetLastError
CreateMutexA
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
GlobalAlloc
GetSystemDirectoryA
MultiByteToWideChar
FindClose
FindNextFileA
FindFirstFileA
GetDriveTypeA
GetLogicalDriveStringsA
CloseHandle
CreateFileA
GetComputerNameA
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
TerminateProcess
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
WriteFile
SetFilePointer
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP

user32

EnumWindows
FindWindowExA
FindWindowA
GetWindowThreadProcessId
MapVirtualKeyA
GetClassNameA
SendMessageA
PostMessageA
LoadCursorA
GetForegroundWindow
GetSystemMetrics
CreateWindowExA
GetMessageA
DispatchMessageA
TranslateMessage
DestroyWindow
PostQuitMessage
DefWindowProcA
BlockInput
SetForegroundWindow
SetFocus
keybd_event
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
wsprintfA
RegisterClassA
ShowWindow

urlmon

URLDownloadToFileA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
VariantInit
SysAllocString

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6afd79303916ab5409758e0ace605cf1

Headers

File Characteristics

Imports

ws2_32

shell32

advapi32

kernel32

user32

urlmon

ole32

oleaut32

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 21KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 21KB