35b513eb71ee873df9f41f16846a031a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

35b513eb71ee873df9f41f16846a031a_JaffaCakes118
Size

188KB
MD5

35b513eb71ee873df9f41f16846a031a
SHA1

223cf1ecadf0feb00cbfc02fbb278240260f0eed
SHA256

07654fdbd6f0cb5cb8de9c12dd8f931cc25416962f197f9d881f7a61561a49a8
SHA512

153917358a8aac9d225424b64096caec4dd84b0f45b9b7ab4959cdd9dbaa8ede0fd57fb3ae9f3ce15ac20531d74a507b351a332ef7b54503bf6a5650df5bad64
SSDEEP

3072:yiFY0vq4EqUJ8Cuwb/079AXYdb5XlmGEnZ9EbYJcsie2iSQzXORTNWZ7pZQj9VG4:yi/vq4qJ8xwL54b51AZiENUQPQnz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b513eb71ee873df9f41f16846a031a_JaffaCakes118

Files

35b513eb71ee873df9f41f16846a031a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23898e1130ecdfb9fbb0f852f49bc35e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

iphlpapi

GetAdaptersInfo
GetBestInterface
SendARP

kernel32

ReadFile
CreateDirectoryA
GetCurrentThreadId
CreateFiberEx
IsBadReadPtr
_llseek
InterlockedExchange
WaitForSingleObject
QueryPerformanceCounter
ResetEvent
GetTickCount
CreateEventA
GlobalMemoryStatus
WaitForMultipleObjects
FlushInstructionCache
SetLastError
CreateSemaphoreA
GetThreadPriority
GetModuleFileNameA
CloseHandle
GetDiskFreeSpaceA
DeviceIoControl
GetDevicePowerState
LoadLibraryExA
GetCurrentProcessId
GetSystemInfo
DeleteFileA
DeleteCriticalSection
lstrlenA
LoadLibraryA
GetSystemDirectoryA
VirtualQuery
CreateThread
GetLocalTime
CreateProcessA
LocalFree
InterlockedDecrement
FreeLibrary
GetACP
LocalAlloc
WriteFile
InitializeCriticalSection
EnumResourceNamesW
EnterCriticalSection
QueryDosDeviceA
SetThreadPriority
LeaveCriticalSection
Sleep
GetWindowsDirectoryA
GetLastError
InterlockedIncrement
DefineDosDeviceA
GetTempPathA
FlushFileBuffers
GetCurrentThread
CreateMutexA
SetEvent
CompareStringA
GetVersion
GetFileAttributesA
VirtualAlloc
GetPrivateProfileStringA
GetSystemTime
GetComputerNameA
OutputDebugStringA
VirtualFree
GetLocaleInfoA
GetModuleHandleA
GetVersionExA
CreateFileA
IsBadWritePtr
ReleaseMutex

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA

gdi32

CreateDIBitmap

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

advapi32

CryptDestroyHash
RegEnumKeyExA
CryptGetHashParam
RegQueryValueExA
CryptEncrypt
CryptHashData
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
CryptImportKey
CryptReleaseContext
CryptCreateHash
GetUserNameA
CryptDestroyKey
RegCreateKeyExA
RegSetValueExA
RegCloseKey

winmm

timeGetTime
timeSetEvent

ole32

StgCreateDocfile
GetRunningObjectTable
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
BindMoniker
CoTaskMemFree
CoCreateInstance
StgIsStorageFile
CreateBindCtx
CreateItemMoniker
StgOpenStorage
CoInitialize

user32

DispatchMessageA
RealGetWindowClassA
GetDesktopWindow
GetQueueStatus
wsprintfA
RegisterWindowMessageA
PostThreadMessageA
GetDC
CreateDialogParamA
MsgWaitForMultipleObjects
ReleaseDC
DestroyWindow
ShowWindow
PeekMessageA
wvsprintfA

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23898e1130ecdfb9fbb0f852f49bc35e

Headers

File Characteristics

Imports

setupapi

iphlpapi

kernel32

wininet

gdi32

shell32

advapi32

winmm

ole32

user32

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 14KB - Virtual size: 13KB

.tls Size: 512B - Virtual size: 72KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 14KB - Virtual size: 13KB

.tls
Size: 512B - Virtual size: 72KB