399edacb2dc54f43aea3fb558ce229d4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

399edacb2dc54f43aea3fb558ce229d4_JaffaCakes118
Size

39KB
MD5

399edacb2dc54f43aea3fb558ce229d4
SHA1

f84a4e47b31eda08388eb9fa5a630c832067d299
SHA256

0e2af2eb6cdcffded76c895a88da475142c0d5ddedf2ccb99ee91a6201bcaaa9
SHA512

de467db6637f851b2128935b898e0428e6fc69670aaa384ec100885414cc35ffc35f036bc4ee9e9a9f61012ece767aee8eed41ae7facb5ad37a5eb8acaa75504
SSDEEP

768:8UYl55yvjXVIHAgGJTYrgDW9efQPeJAHSaoWG:JJvbVIHz8DEmMEGoWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399edacb2dc54f43aea3fb558ce229d4_JaffaCakes118

Files

399edacb2dc54f43aea3fb558ce229d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0755bb7a12a1ca65b2dd8aef1f7eaea5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_addr
closesocket
send
connect
ioctlsocket
WSAStartup
select
recv
gethostbyname
WSACleanup
htons
socket

advapi32

RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
RegOpenKeyExA

kernel32

ReadFile
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
LocalFree
RaiseException
SetUnhandledExceptionFilter
IsBadCodePtr
GetProcAddress
GetModuleHandleA
ExitProcess
GetLastError
CreateMutexA
Sleep
SetErrorMode
CloseHandle
CreateProcessA
ExitThread
GetTempPathA
GetTickCount
CopyFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpiA
GetWindowsDirectoryA
GetModuleFileNameA
lstrlenA
CreateThread
ExpandEnvironmentStringsA
GetVersionExA
DeleteFileA
ReleaseMutex
GetSystemDefaultLangID
GlobalUnlock
GlobalLock
GlobalAlloc
CreateFileA
GetLocaleInfoA
WaitForSingleObject
WriteFile
CreateDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
lstrcpynA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
SetFilePointer
FlushFileBuffers
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
SetStdHandle

user32

BlockInput
keybd_event
SetForegroundWindow
SetFocus
ShowWindow
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FindWindowA

shlwapi

PathRemoveFileSpecA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantClear
SysAllocString
VariantInit

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0755bb7a12a1ca65b2dd8aef1f7eaea5

Headers

File Characteristics

Imports

ws2_32

advapi32

kernel32

user32

shlwapi

ole32

oleaut32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 5KB - Virtual size: 144KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 144KB