4cc2f56e5eb316e7a065302993f0bf08_JaffaCakes118

General

Target

4cc2f56e5eb316e7a065302993f0bf08_JaffaCakes118
Size

209KB
MD5

4cc2f56e5eb316e7a065302993f0bf08
SHA1

f4392b547e861f805000dc73bc5a912bd1f8c9b1
SHA256

9247bf94d501919807b089684658a4d312a89c52ddeb6402a16b6ccf64697723
SHA512

78ed5f05456185dbc3e96851ccda79136b7c5931d6de52486b188eea97636d66dfd0f883e694e4baed8a150743557b99d42072d4094c945788808227cecfb0a4
SSDEEP

6144:X4OTsSbf6MGeMT0Y0MB+KF2Kx2WMWTCrintds:XymflGeMAYBF2KYhBitds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc2f56e5eb316e7a065302993f0bf08_JaffaCakes118

Files

4cc2f56e5eb316e7a065302993f0bf08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e4b916d749a326eaef5b67032fd6745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

winmm

timeGetTime
timeSetEvent

user32

PostThreadMessageA
GetQueueStatus
PeekMessageA
RegisterWindowMessageA
ShowWindow
DispatchMessageA
GetDC
wsprintfA
GetDesktopWindow
MsgWaitForMultipleObjects
ReleaseDC
RealGetWindowClassW
CreateDialogParamA
DestroyWindow
wvsprintfA

advapi32

CryptHashData
RegOpenKeyExA
CryptReleaseContext
RegEnumKeyExA
RegDeleteValueA
CryptDestroyHash
RegEnumValueA
CryptGetHashParam
CryptCreateHash
CryptImportKey
RegCreateKeyExA
GetUserNameA
RegQueryValueExA
CryptDestroyKey
CryptEncrypt
RegSetValueExA
RegCloseKey

kernel32

CreateFiber
GetLastError
IsBadReadPtr
VirtualFree
SetThreadContext
GetSystemTime
GetTickCount
EnumResourceNamesW
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetCurrentThread
WaitForMultipleObjects
lstrcatA
GetACP
CreateSemaphoreA

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e4b916d749a326eaef5b67032fd6745

Headers

File Characteristics

Imports

wininet

winmm

user32

advapi32

kernel32

setupapi

Sections

.text Size: 185KB - Virtual size: 184KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 20KB

.tls Size: 512B - Virtual size: 96KB

.text
Size: 185KB - Virtual size: 184KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 20KB

.tls
Size: 512B - Virtual size: 96KB