55f63eb30f0574bb0c4047745d51dafc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

55f63eb30f0574bb0c4047745d51dafc_JaffaCakes118
Size

34KB
MD5

55f63eb30f0574bb0c4047745d51dafc
SHA1

fc01f563a2758ef8dc605adcc6eaf6eb1998559d
SHA256

b5b44c7e3be08cb86e64c11437e2a9774e2a64c30224685591a1e5bd0b8d09a5
SHA512

6552d3859063ccf51a8156d05f5610a2240db651a6d7b9e0976941b412c212524b029031085948094a30f8fd5e7f9be345c9a6be4f81fb903deafb867d639c4d
SSDEEP

384:g5oIZft/yUGrtjKXWheG9+uwxNGLKhQFjgRQSvA:g5oIZJdGxjKXWEMuh6Ab4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55f63eb30f0574bb0c4047745d51dafc_JaffaCakes118

Files

55f63eb30f0574bb0c4047745d51dafc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

40895cbabe006f065b09f8c33d5c47c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrcpynA
lstrlenA
Sleep
CloseHandle
CreateThread
lstrcatA
OutputDebugStringA
ReadFile
CreateFileA
WriteFile
GetTempPathA
SetFilePointer
GetModuleFileNameA
WriteProcessMemory
GetCurrentProcess
LoadLibraryA

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

wininet

HttpAddRequestHeadersA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetQueryDataAvailable
InternetCloseHandle

msvcrt

__CxxFrameHandler
_purecall
_except_handler3
strrchr
malloc
free
??2@YAPAXI@Z
atoi
strstr
strncpy
_stricmp

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40895cbabe006f065b09f8c33d5c47c3

Headers

File Characteristics

Imports

kernel32

msvcp60

wininet

msvcrt

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 1KB