292004e30859d6e8000653f67649bded_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

292004e30859d6e8000653f67649bded_JaffaCakes118
Size

317KB
MD5

292004e30859d6e8000653f67649bded
SHA1

91c91f6c19f1251c675f2ee3c363639f61086573
SHA256

baad9fd90a3c99823919ea01e10dab5e3b0f64c9a83e21f395cc239f6873e44b
SHA512

5b6e7c1b6524665428ff344b6e9488a2db2861cc34dab2a05d2f273d72b3e4983a7a24c8f21872711935ff886a3ddcc7eef17c68b06092749922cd74231861bb
SSDEEP

6144:uTXLIfKSePhC0pDUIBzBKe68z7KO7XB2aeX5dr4+loNZfgWOso86pNt3:qPSPeDUWW8z470ZIW6p33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292004e30859d6e8000653f67649bded_JaffaCakes118

Files

292004e30859d6e8000653f67649bded_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9d85d59f46018baef062afe2c714ed03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiCallClassInstaller
SetupGetSourceFileLocationA
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
SetupGetSourceInfoA
SetupOpenMasterInf
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupPromptForDiskA
SetupCloseInfFile

advapi32

OpenServiceA
ChangeServiceConfigA
QueryServiceStatus
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
StartServiceA
RegOpenKeyExA
CloseServiceHandle
RegEnumKeyA
OpenSCManagerA
RegQueryValueExW
RegOpenKeyW

tapi32

lineGetDevCapsW
lineGetID
lineOpen
lineClose
lineInitializeExW
lineNegotiateAPIVersion
lineShutdown

kernel32

lstrcpyA
GetLastError
GetTickCount
Sleep
GetLocaleInfoA
FormatMessageA
CreateFileA
HeapAlloc
GetSystemInfo
lstrcmpA
MultiByteToWideChar
lstrcmpiA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
VirtualFree
GetTempFileNameW
HeapReAlloc
GlobalAlloc
LoadLibraryA
lstrlenW
GetProcessHeap
LCMapStringW
lstrcmpiW
GetStringTypeA
FreeLibrary
GetTempPathW
CloseHandle
CreateDirectoryW
GetStringTypeW
GetCPInfo
lstrlenA
ExitProcess
VirtualProtect
GetShortPathNameW
GetProcAddress
GlobalFree
GetVersionExA
VirtualAlloc
WriteFile
VirtualQuery
LCMapStringA

ntdll

RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory

user32

wsprintfA

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d85d59f46018baef062afe2c714ed03

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

advapi32

tapi32

kernel32

ntdll

user32

ole32

Sections

.text Size: 15KB - Virtual size: 15KB

.rsrc Size: 287KB - Virtual size: 286KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 287KB - Virtual size: 286KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB