f7a870312fd328af7eef5f39c8315dd8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f7a870312fd328af7eef5f39c8315dd8_JaffaCakes118
Size

161KB
MD5

f7a870312fd328af7eef5f39c8315dd8
SHA1

59d036cbf5c6ae7e79af1f7cdd3a02c806d26a4c
SHA256

9c4acf31d9d80d94a5b32d602a00b46255ecb9490b55d85ba1dda1bc33e50e9f
SHA512

f8133098b84869fa883db61db6b5517db07c68e862c9a59171709fdef47311ccf33f5595de5c077a8ef30eaf28e510b7d7b94d82f56d4ab6c9160bef7eba1f90
SSDEEP

3072:0Q0yYdv5eJAdLWEuxhdtN7/H5C1OmMsL90XqhQW8bu4IzOYIhUwz9Ga:0Q0eJGFYPtN7H5SUsL2it8bu4IznI2wZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7a870312fd328af7eef5f39c8315dd8_JaffaCakes118

Files

f7a870312fd328af7eef5f39c8315dd8_JaffaCakes118
.exe windows:2 windows x86 arch:x86

35752951f6878e0b74a9790aa1add31d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

floor
wcslen
_isnan
_vsnwprintf
_aligned_malloc
_aligned_free
_initterm
_purecall
free
malloc
wcscmp
_controlfp

kernel32

HeapSize
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
GetLastError
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetTickCount
HeapFree
GetProcessHeap
InterlockedCompareExchange
GetCurrentThreadId
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
SetThreadPriority
CreateSemaphoreW
InterlockedExchange
WaitForMultipleObjects
CloseHandle
WaitForSingleObject
SetEvent
CreateThread
CreateEventA
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetSystemInfo
ReleaseSemaphore
CreateEventW
ReadFile
SwitchToThread
GetOverlappedResult
UnhandledExceptionFilter
VirtualAlloc

rpcrt4

RpcStringFreeA
UuidToStringA

ole32

PropVariantCopy
PropVariantClear
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CLSIDFromString

advapi32

RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

user32

GetDesktopWindow

winmm

timeEndPeriod
timeBeginPeriod
midiOutShortMsg
timeSetEvent
joyGetDevCapsW
mixerClose
auxSetVolume
joyReleaseCapture
joy32Message
GetDriverModuleHandle
midiOutUnprepareHeader
mmioInstallIOProcW
mciDriverYield
mixerGetControlDetailsA
mmioAscend
mmGetCurrentTask
midiStreamStop

crypt32

CertOpenStore
CertDuplicateCertificateContext
CryptStringToBinaryA
CertUnregisterPhysicalStore
CryptMsgControl
CertGetCertificateChain
CryptGetKeyIdentifierProperty
CertGetSubjectCertificateFromStore
CryptSetProviderU
RegQueryInfoKeyU
CryptSetKeyIdentifierProperty
CryptUnregisterDefaultOIDFunction
CryptLoadSip
I_CryptDetachTls
CertVerifyCTLUsage
RegOpenHKCUKeyExU
CertGetValidUsages
CertCreateCTLContext
CertOpenSystemStoreW
CertGetIntendedKeyUsage
CryptGetOIDFunctionValue
CryptSignMessageWithKey
CryptMsgEncodeAndSignCTL
CertVerifyValidityNesting
CertRDNValueToStrW
CryptGetAsyncParam
CertSetCertificateContextProperty
CertAddCRLContextToStore
CertSetCRLContextProperty
CryptBinaryToStringW
CryptHashToBeSigned
I_CryptGetDefaultCryptProvForEncrypt
I_CryptGetFileVersion
CertDeleteCTLFromStore
CryptFindCertificateKeyProvInfo

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 202KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 13.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35752951f6878e0b74a9790aa1add31d

Headers

File Characteristics

Imports

msvcrt

kernel32

rpcrt4

ole32

advapi32

user32

winmm

crypt32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 202KB - Virtual size: 240KB

.reloc Size: 17KB - Virtual size: 13.3MB

.rsrc Size: 1024B - Virtual size: 628B

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 202KB - Virtual size: 240KB

.reloc
Size: 17KB - Virtual size: 13.3MB

.rsrc
Size: 1024B - Virtual size: 628B