62528670c65af2620ef881815b60898b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

62528670c65af2620ef881815b60898b_JaffaCakes118
Size

888KB
MD5

62528670c65af2620ef881815b60898b
SHA1

c9b2d48182591aa2934a4537bddea8e4ad49ffc9
SHA256

002860ee6473eec39e79bb7ac2883d3bc659114a40f383c6029acbab58c98e16
SHA512

2c00082b37dcfc3c66da8d9cdf4e9d20d94014168292ee6335207ea4c9b306f525ccd2cf008ed1871b8acacc39358581161a695c04c4d379c933555bdf9a835d
SSDEEP

24576:u1FUq2FuBtbj/iERt9/P3UGNj5X/1YRsain:kU5kPRLEGNj5X92K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62528670c65af2620ef881815b60898b_JaffaCakes118

Files

62528670c65af2620ef881815b60898b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5df46ef646c1060a60b54754e01c30aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupOpenInfFileW
SetupFindFirstLineW
SetupFindNextLine
SetupGetFieldCount
SetupGetStringFieldW
SetupGetIntField
SetupCloseFileQueue
SetupDiCreateDeviceInfoListExW
SetupDiGetDeviceInfoListDetailW
SetupDiEnumDriverInfoW
SetupDiGetClassDevsW
SetupDiGetClassDevsExW
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
CM_Get_Parent
CM_Get_Parent_Ex
SetupOpenFileQueue

user32

EndPaint
SetMenuDefaultItem
AppendMenuW
DestroyMenu
CreatePopupMenu
SetMenu
GetMenu
LockWindowUpdate
GetDlgItemTextW
SetDlgItemTextW
IsIconic
DestroyWindow
SendMessageTimeoutW
ExitWindowsEx
GetMessageW
RegisterWindowMessageW
RemovePropW
GetWindowTextLengthW
ShowCursor
GetCursorPos
GetCursor
FrameRect
SetRect
InflateRect
UnionRect
GetParent
WinHelpW
GetSystemMetrics
GetWindowTextW

shlwapi

StrChrW
AssocQueryStringW
SHSetValueW
SHDeleteValueW
UrlEscapeW
UrlIsW
UrlCanonicalizeW
PathIsURLW
PathFindFileNameW
SHStrDupW
StrRetToStrW
StrToIntExW
StrChrIW
StrCmpNIW

ole32

CoTaskMemFree
PropVariantClear
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromProgID

kernel32

VirtualAlloc
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetThreadLocale
LCMapStringW
GetACP
GetFileAttributesW
CreateFileW
GetModuleHandleW
lstrlenW
lstrcmpW
CloseHandle
SetEndOfFile
GetFileSize
WaitForSingleObject
ReleaseSemaphore
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetProcAddress
GlobalAlloc
LocalAlloc
GetCurrentProcessId
GetCurrentThreadId

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 809KB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5df46ef646c1060a60b54754e01c30aa

Headers

File Characteristics

Imports

setupapi

user32

shlwapi

ole32

kernel32

Sections

.text Size: 65KB - Virtual size: 64KB

.data Size: 809KB - Virtual size: 8.1MB

.idata Size: 4KB - Virtual size: 3KB

.xdata Size: 9KB - Virtual size: 12KB

.text
Size: 65KB - Virtual size: 64KB

.data
Size: 809KB - Virtual size: 8.1MB

.idata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 9KB - Virtual size: 12KB