438d8622afc2ec788d31ebdcaf9311ee_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

438d8622afc2ec788d31ebdcaf9311ee_JaffaCakes118
Size

104KB
MD5

438d8622afc2ec788d31ebdcaf9311ee
SHA1

269edac282e6771e98fea280b4acf01018f3542b
SHA256

1e2312804f9c5d6abaa6abaa8b0372ca1e29a4dc66b20c4f4672752b2d23132a
SHA512

d75229ec592d8176246312146c701cdfbd8ad989cb3d78818734657fe0007d8c9f0b347ecc0192c61b04392c56db512d84cd5c9213bc81f883784db758eab8a2
SSDEEP

1536:PzHfUGxNiunKsRb7sj05rLreJA4j0xPsciQ38a6tFcBdP:L/rb42DiQ38a6tFmdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
438d8622afc2ec788d31ebdcaf9311ee_JaffaCakes118

Files

438d8622afc2ec788d31ebdcaf9311ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d5c2bf1d9a4f650dace32db1821a71c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\Dev\My Documents\Sources\DNS Failure\release\netmon.pdb

Imports

shlwapi

PathAppendW

shell32

SHGetFolderPathW

user32

MessageBoxW

advapi32

RegisterServiceCtrlHandlerW
DeleteService
ControlService
OpenServiceW
CloseServiceHandle
StartServiceW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
StartServiceCtrlDispatcherW
SetServiceStatus
OpenSCManagerW
CreateServiceW

wininet

InternetOpenW
HttpOpenRequestW
HttpAddRequestHeadersW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetConnectW

kernel32

WriteConsoleW
CreateFileA
CompareStringA
CompareStringW
GetACP
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
WriteFile
GetExitCodeProcess
TerminateProcess
CreateDirectoryW
GetLastError
SetFilePointer
WideCharToMultiByte
FlushFileBuffers
CreateFileW
CloseHandle
CreatePipe
GetEnvironmentVariableW
CreateProcessW
PeekNamedPipe
ReadFile
WaitForSingleObject
SetEndOfFile
Sleep
GetCurrentDirectoryW
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
RaiseException
GetTimeZoneInformation
MultiByteToWideChar
GetTimeFormatA
GetDateFormatA
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8d5c2bf1d9a4f650dace32db1821a71c

Headers

File Characteristics

PDB Paths

Imports

shlwapi

shell32

user32

advapi32

wininet

kernel32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 16KB - Virtual size: 36KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 16KB - Virtual size: 36KB