298ae5b085c6da7ea6e483af9708186e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

298ae5b085c6da7ea6e483af9708186e_JaffaCakes118
Size

184KB
MD5

298ae5b085c6da7ea6e483af9708186e
SHA1

ae15223e5f8ea9e579c690ccde90963c2874b188
SHA256

0c949488dd1b9af50814c591ca5198716c1db7734b26f272ea735d01786923b4
SHA512

3a160b7a401f19b1c13f85471cee39448a2d70ab8d0b0368e564ac1ff5074039523445c0ca6c59747a012f626cc7724e2cf96f7fce6016751e25fa3156f10938
SSDEEP

3072:n6J4djZMZofUnNwVp/17pwBXpMJ8ygzT+zSsfiJsSzcbAwUNd533DMEJLAyU+xzs:XVuZoC2frW2PuB7ZT53DNAyntb78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
298ae5b085c6da7ea6e483af9708186e_JaffaCakes118

Files

298ae5b085c6da7ea6e483af9708186e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1cf5f9b31c903b8fa7fa16045617ccd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetVersionExA
QueryDosDeviceA
CreateMutexA
ReadFile
GetSystemInfo
CreateSemaphoreA
CloseHandle
QueryPerformanceCounter
CreateFiberEx
GetPrivateProfileStringA
GetModuleFileNameA
GetLocaleInfoA
FreeLibrary
GetCurrentThreadId
GetDevicePowerState
GlobalMemoryStatus
DefineDosDeviceA
DeviceIoControl
IsBadWritePtr
GetSystemTime
WaitForMultipleObjects
VirtualQuery
Sleep
InterlockedExchange
CreateThread
ResetEvent
SetEvent
SetLastError
GetCurrentThread
lstrlenA
GetModuleHandleA
VirtualAlloc
WriteFile
CreateDirectoryA
InterlockedIncrement
GetVersion
FlushInstructionCache
InitializeCriticalSection
CreateEventA
EnumResourceNamesW
OutputDebugStringA
CreateProcessA
SetThreadPriority
EnterCriticalSection
LoadLibraryExA
CompareStringA
GetLastError
GetWindowsDirectoryA
IsBadReadPtr
FlushFileBuffers
GetACP
LoadLibraryA
LocalFree
GetSystemDirectoryA
GetThreadPriority
CreateFileA
VirtualFree
GetCurrentProcessId
WaitForSingleObject
GetTempPathA
DeleteFileA
InterlockedDecrement
GetFileAttributesA
GetComputerNameA
GetDiskFreeSpaceA
_llseek
GetLocalTime
GetTickCount
DeleteCriticalSection
LeaveCriticalSection
ReleaseMutex

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
StgIsStorageFile
CreateBindCtx
GetRunningObjectTable
BindMoniker
StgOpenStorage
CoTaskMemAlloc
StgCreateDocfile
CreateItemMoniker
StringFromGUID2
CoInitialize

advapi32

CryptEncrypt
CryptDestroyKey
RegSetValueExA
CryptHashData
CryptGetHashParam
RegEnumKeyExA
RegEnumValueA
CryptReleaseContext
CryptCreateHash
GetUserNameA
RegDeleteValueA
CryptImportKey
RegCreateKeyExA
RegQueryValueExA
CryptDestroyHash
RegOpenKeyExA
RegCloseKey

iphlpapi

GetAdaptersInfo
GetBestInterface
SendARP

winmm

timeGetTime
timeSetEvent

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA

user32

MsgWaitForMultipleObjects
PostThreadMessageA
wsprintfA
CreateDialogParamA
GetQueueStatus
ReleaseDC
RealGetWindowClassA
GetDC
DestroyWindow
PeekMessageA
ShowWindow
DispatchMessageA
RegisterWindowMessageA
GetDesktopWindow
wvsprintfA

gdi32

CreateDIBitmap

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1cf5f9b31c903b8fa7fa16045617ccd

Headers

File Characteristics

Imports

kernel32

ole32

advapi32

iphlpapi

winmm

setupapi

shell32

wininet

user32

gdi32

Sections

.text Size: 155KB - Virtual size: 155KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 23KB - Virtual size: 23KB

.tls Size: 512B - Virtual size: 80KB

.text
Size: 155KB - Virtual size: 155KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 23KB - Virtual size: 23KB

.tls
Size: 512B - Virtual size: 80KB