22c6b56726b4d0976db76b15c9c1be0a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

22c6b56726b4d0976db76b15c9c1be0a_JaffaCakes118
Size

198KB
MD5

22c6b56726b4d0976db76b15c9c1be0a
SHA1

b083d464c18c61d83b5a4b4622f06a45024fa3fa
SHA256

9008b5fe9e2b80e4d0b0bea423f093b0cf84efccd0f346c6ebdd683b80576c50
SHA512

6d970c07d90143b9eebad6834063eea6221ae99d5e75f29da448c604e626e0678e8602f037a940eff7b9882e1b16e5e6cc2aaa98ec98cc104caf1f6ff8c601fa
SSDEEP

3072:tl45mK3WAAR7PcnZh9283zJppUhMs99wwM5peNc9goqGuE1Nsz3sRap5ibT/:YPmAnnZh/jJ1i9xM5sDEnQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22c6b56726b4d0976db76b15c9c1be0a_JaffaCakes118

Files

22c6b56726b4d0976db76b15c9c1be0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

702815870fcc7a279892333ed5f5c45d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

iphlpapi

GetBestInterface
GetAdaptersInfo
SendARP

kernel32

WaitForSingleObject
IsBadReadPtr
CreateFileA
ResetEvent
VirtualQuery
InitializeCriticalSection
ReadFile
InterlockedIncrement
InterlockedDecrement
CreateProcessA
CreateFiberEx
EnterCriticalSection
CreateThread
SetThreadPriority
GetSystemTime
WaitForMultipleObjects
GetCurrentThread
GetDevicePowerState
GetFileAttributesA
LocalAlloc
LoadLibraryExA
GetACP
GetThreadPriority
GetDiskFreeSpaceA
_llseek
FlushInstructionCache
FreeLibrary
GetLocalTime
GetModuleHandleA
GetPrivateProfileStringA
GetVersion
SetEvent
CreateSemaphoreA
CompareStringA
GetVersionExA
WriteFile
GetSystemDirectoryA
OutputDebugStringA
VirtualFree
Sleep
GetCurrentProcessId
EnumResourceNamesW
InterlockedExchange
SetLastError
QueryPerformanceCounter
DeleteCriticalSection
DefineDosDeviceA
FlushFileBuffers
GetModuleFileNameA
CreateEventA
GetWindowsDirectoryA
VirtualAlloc
GetTickCount
lstrlenA
LeaveCriticalSection
GetSystemInfo
GetCurrentThreadId
CloseHandle
CreateDirectoryA
LocalFree
QueryDosDeviceA
LoadLibraryA
GetLastError
DeleteFileA
CreateMutexA
GetComputerNameA
GetLocaleInfoA
DeviceIoControl
GetTempPathA
GlobalMemoryStatus
IsBadWritePtr
ReleaseMutex

gdi32

CreateDIBitmap

ole32

BindMoniker
CreateItemMoniker
StgIsStorageFile
StringFromGUID2
CoTaskMemAlloc
StgCreateDocfile
StgOpenStorage
CreateBindCtx
GetRunningObjectTable
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitialize

winmm

timeGetTime
timeSetEvent

user32

ReleaseDC
RealGetWindowClassA
DispatchMessageA
ShowWindow
DestroyWindow
PeekMessageA
GetQueueStatus
PostThreadMessageA
GetDesktopWindow
wsprintfA
RegisterWindowMessageA
GetDC
CreateDialogParamA
MsgWaitForMultipleObjects
wvsprintfA

advapi32

RegCreateKeyExA
CryptDestroyKey
GetUserNameA
RegEnumValueA
CryptImportKey
CryptReleaseContext
CryptCreateHash
RegQueryValueExA
CryptEncrypt
CryptGetHashParam
RegDeleteValueA
CryptHashData
RegOpenKeyExA
RegSetValueExA
CryptDestroyHash
RegEnumKeyExA
RegCloseKey

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

702815870fcc7a279892333ed5f5c45d

Headers

File Characteristics

Imports

wininet

shell32

iphlpapi

kernel32

gdi32

ole32

winmm

user32

advapi32

setupapi

Sections

.text Size: 176KB - Virtual size: 175KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 17KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 220KB

.text
Size: 176KB - Virtual size: 175KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 17KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 220KB