5bea258db614f2ab87468fa3b04593ad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5bea258db614f2ab87468fa3b04593ad_JaffaCakes118
Size

1.2MB
MD5

5bea258db614f2ab87468fa3b04593ad
SHA1

2bccb2af403bfe417e4a0eb7ddfebc9dcb0e880f
SHA256

c02d57a6e4ec84cdb9bbcdb5031fb41026b042164625d556a5ac78ba0b87e68a
SHA512

531927980e67975a1fbff6aea40e7935b8f1e050997ed68556255335706091ab638fda37af88e201cc2cf4c41d517905768d3083d7f9dd7439b19070683a025f
SSDEEP

24576:rbTQ5E/vpxVV/nDmmH4lCAGPenOcDXKaZe8NKelnRcIEq:rbTQ5GvdVvDmrVGPba68dIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bea258db614f2ab87468fa3b04593ad_JaffaCakes118

Files

5bea258db614f2ab87468fa3b04593ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

28a012f1f137da029c3f2146f842c210

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Locate_DevNodeW
CM_Get_Parent
CM_Get_DevNode_Registry_Property_ExW
CM_Get_Device_ID_ExW
CM_Get_Device_IDW
SetupDiGetActualSectionToInstallW
SetupDiSetClassInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiCallClassInstaller
SetupDiGetClassDevsExW
SetupDiGetClassDevsW
SetupDiGetDriverInfoDetailW
SetupDiEnumDriverInfoW
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInstanceIdW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoList
SetupInstallFromInfSectionW
SetupCloseFileQueue
SetupGetIntField
SetupFindNextLine
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenInfFileW

kernel32

CreateFileW
LCMapStringW
HeapSize
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
IsValidCodePage
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
GlobalLock
GlobalUnlock
LocalAlloc
VirtualAlloc
HeapReAlloc
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
WaitForSingleObject
GetFileType
GetFileSize
WriteFile
CloseHandle
GetSystemTimeAsFileTime
GetStartupInfoW
GetCommandLineW
FindResourceExW
GetFileAttributesW
GetACP
GetOEMCP
WideCharToMultiByte
GetLocaleInfoW
GetStringTypeW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
TlsAlloc
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
DeleteCriticalSection
GetModuleFileNameW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
FlushFileBuffers

userenv

RegisterGPNotification
LeaveCriticalPolicySection
EnterCriticalPolicySection
ExpandEnvironmentStringsForUserW
UnregisterGPNotification

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 884KB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ifah
Size: 120KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28a012f1f137da029c3f2146f842c210

Headers

File Characteristics

Imports

setupapi

kernel32

userenv

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 884KB - Virtual size: 8.0MB

.ifah Size: 120KB - Virtual size: 121KB

.rsrc Size: 99KB - Virtual size: 98KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 884KB - Virtual size: 8.0MB

.ifah
Size: 120KB - Virtual size: 121KB

.rsrc
Size: 99KB - Virtual size: 98KB