42cdc861a38bde79a6e7ae87abb2dd30_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42cdc861a38bde79a6e7ae87abb2dd30_JaffaCakes118
Size

144KB
MD5

42cdc861a38bde79a6e7ae87abb2dd30
SHA1

95d366b45b394eaff07d5c157885be33f68dc24e
SHA256

bcf3594d575455e8b6bbf3ff3963f9d622cd151f15cf0528f654156376dbda58
SHA512

e7c3345bd4a18ea24d74f8b3d1ba374742d5a162c92528016cce90f3d27817e0c5f19761ae84b4b0f2a62c7559a14a5d176c6f13b5eef8db0f91375cf2ab7d01
SSDEEP

3072:rpVcdG7eMlfMWFbCXCe0SNDCHyetwxSWnnjBzgxT9ybaPRtfkWi3Mi4FfOjYIi/R:rpVcdG7e2fMWFbCXCe0SNDCHyetwxSWn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42cdc861a38bde79a6e7ae87abb2dd30_JaffaCakes118

Files

42cdc861a38bde79a6e7ae87abb2dd30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cb2653cf753160b41e16d442a2ed80f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
SetPriorityClass
GetCurrentProcess
lstrcmpA
FindClose
GetFullPathNameA
DeleteFileA
FindFirstFileA
GetCurrentDirectoryA
GetFileAttributesA
lstrcmpiA
CopyFileA
CreateProcessA
ExitProcess
GetComputerNameA
ExitThread
CreateDirectoryA
SetThreadPriority
CreateMutexA
WaitForSingleObject
CreateThread
GetStringTypeW
GetStringTypeA
SetEndOfFile
LoadLibraryA
GetOEMCP
CreateFileA
CloseHandle
Sleep
lstrlenA
WriteFile
SetFilePointer
FindNextFileA
GetACP
CompareStringW
CompareStringA
GetCPInfo
VirtualAlloc
FlushFileBuffers
GetLastError
LocalAlloc
GlobalFree
GlobalReAlloc
GlobalAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetStdHandle
GetFileType
TerminateProcess
SetEnvironmentVariableA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ReadFile
SetHandleCount
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetProcAddress

user32

GetCursorPos
GetKeyboardState
GetKeyNameTextA
wsprintfA
GetWindowTextA
GetActiveWindow
CallNextHookEx
GetAsyncKeyState
DefWindowProcA
FindWindowA
SetWindowsHookExA
ReleaseDC
GetDC
UnhookWindowsHookEx
PeekMessageA
GetMessageA
SetKeyboardState
DispatchMessageA
ToAscii

advapi32

RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
RegSetValueExA

wininet

FtpCreateDirectoryA
InternetConnectA
InternetOpenA
FtpPutFileA
FtpGetCurrentDirectoryA
InternetCloseHandle
FtpSetCurrentDirectoryA

gdi32

GetObjectA
GetDIBits
RealizePalette
SelectPalette
GetStockObject
SetPixel
BitBlt
SelectObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateDCA

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cb2653cf753160b41e16d442a2ed80f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

gdi32

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 31KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 31KB

.rsrc
Size: 4KB - Virtual size: 2KB