2a8961d3fb7f15021691a584ac63d9f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a8961d3fb7f15021691a584ac63d9f3_JaffaCakes118
Size

188KB
MD5

2a8961d3fb7f15021691a584ac63d9f3
SHA1

36fd6738f16f2acd54213b6bbe2f72b54142e649
SHA256

18139293cd14cdff496d8cca911533a1dd9e29b8b0b4b6edb608a289367abbb4
SHA512

50532df8718ab78283575f36c4cc6d3c5d58e42b8eb8e847d48c85653fda2e8f1cd67007196854dec497ee5d30aba3dcd48e080cef1ea235f28e18a5640da60b
SSDEEP

3072:jPevGur0LpCUEDWFDHf4qArHEw0M2jvHsNc4uoFHUjIia+xdjwKqQROVLHz59pON:jPIGur0LBEgCjEw0j/EcFo+xlwKzROlY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a8961d3fb7f15021691a584ac63d9f3_JaffaCakes118

Files

2a8961d3fb7f15021691a584ac63d9f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59453508ee6a2060d1c10fb7007048c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

iphlpapi

GetBestInterface
GetAdaptersInfo
SendARP

ole32

CreateItemMoniker
CoTaskMemFree
CoTaskMemAlloc
BindMoniker
CoUninitialize
StgOpenStorage
CoCreateInstance
CreateBindCtx
GetRunningObjectTable
StgIsStorageFile
StgCreateDocfile
StringFromGUID2
CoInitialize

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

kernel32

IsBadWritePtr
CreateFiberEx
FreeLibrary
VirtualFree
IsBadReadPtr
GetCurrentProcessId
GetThreadPriority
_llseek
SetLastError
GetLastError
GetDiskFreeSpaceA
CreateEventA
WaitForMultipleObjects
GetCurrentThreadId
DeviceIoControl
TerminateJobObject
VirtualAlloc
GetTickCount
Sleep
InitializeCriticalSection
lstrlenA
GetFileAttributesA
GetModuleFileNameA
DeleteFileA
InterlockedExchange
GetCurrentThread
LoadLibraryA
VirtualQuery
InterlockedDecrement
DeleteCriticalSection
CreateMutexA
GetACP
GetSystemDirectoryA
CloseHandle
EnumResourceNamesW
GetVersionExA
GetVersion
GetSystemTime
ResetEvent
GetModuleHandleA
WriteFile
GetLocaleInfoA
DefineDosDeviceA
EnterCriticalSection
SetEvent
CompareStringA
GetComputerNameA
CreateDirectoryA
GetSystemInfo
QueryPerformanceCounter
QueryDosDeviceA
SetThreadPriority
CreateProcessA
FlushFileBuffers
LocalFree
FlushInstructionCache
GetTempPathA
CreateThread
LeaveCriticalSection
ReadFile
LoadLibraryExA
GlobalMemoryStatus
LocalAlloc
GetLocalTime
CreateSemaphoreA
InterlockedIncrement
OutputDebugStringA
CreateFileA
GetPrivateProfileStringA
GetWindowsDirectoryA
WaitForSingleObject
ReleaseMutex

advapi32

RegOpenKeyExA
CryptGetHashParam
CryptEncrypt
RegEnumValueA
CryptImportKey
CryptHashData
CryptAcquireContextA
RegQueryValueExA
CryptDestroyHash
CryptCreateHash
GetUserNameA
RegEnumKeyExA
CryptDestroyKey
CryptReleaseContext
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey

winmm

timeGetTime
timeSetEvent

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

gdi32

CreateDIBitmap

user32

RegisterWindowMessageA
wsprintfA
GetQueueStatus
GetDC
ShowWindow
RealGetWindowClassA
DestroyWindow
ReleaseDC
PeekMessageA
PostThreadMessageA
CreateDialogParamA
MsgWaitForMultipleObjects
DispatchMessageA
GetDesktopWindow
wvsprintfA

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59453508ee6a2060d1c10fb7007048c1

Headers

File Characteristics

Imports

iphlpapi

ole32

shell32

kernel32

advapi32

winmm

wininet

gdi32

user32

setupapi

Sections

.text Size: 167KB - Virtual size: 167KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 15KB - Virtual size: 14KB

.tls Size: 512B - Virtual size: 76KB

.text
Size: 167KB - Virtual size: 167KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 15KB - Virtual size: 14KB

.tls
Size: 512B - Virtual size: 76KB