6922d39c45f188ec77923390c66e122a_JaffaCakes118

General

Target

6922d39c45f188ec77923390c66e122a_JaffaCakes118
Size

209KB
MD5

6922d39c45f188ec77923390c66e122a
SHA1

dea7a29ad8f23f785e873b83f991c808f49c59f8
SHA256

cbea633113c82292bad45541c53df2671dc13d6c34302f24d4adbc98d4960a14
SHA512

a4142aa6470106bc5277ae1b8edf90eb0e0db876516d5eefad943d29d7050a069b0d2171e363b209742e25c9f2d2f8497cdff0bdcc653d6d9a9d0895757c8361
SSDEEP

6144:X4OTsSbf6MGeMT0Y0MB+KF2Kx2WMWTCrintds:XymflGeMAYBF2KYhBitds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6922d39c45f188ec77923390c66e122a_JaffaCakes118

Files

6922d39c45f188ec77923390c66e122a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e4b916d749a326eaef5b67032fd6745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

winmm

timeGetTime
timeSetEvent

user32

PostThreadMessageA
GetQueueStatus
PeekMessageA
RegisterWindowMessageA
ShowWindow
DispatchMessageA
GetDC
wsprintfA
GetDesktopWindow
MsgWaitForMultipleObjects
ReleaseDC
RealGetWindowClassW
CreateDialogParamA
DestroyWindow
wvsprintfA

advapi32

CryptHashData
RegOpenKeyExA
CryptReleaseContext
RegEnumKeyExA
RegDeleteValueA
CryptDestroyHash
RegEnumValueA
CryptGetHashParam
CryptCreateHash
CryptImportKey
RegCreateKeyExA
GetUserNameA
RegQueryValueExA
CryptDestroyKey
CryptEncrypt
RegSetValueExA
RegCloseKey

kernel32

CreateFiber
GetLastError
IsBadReadPtr
VirtualFree
SetThreadContext
GetSystemTime
GetTickCount
EnumResourceNamesW
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetCurrentThread
WaitForMultipleObjects
lstrcatA
GetACP
CreateSemaphoreA

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e4b916d749a326eaef5b67032fd6745

Headers

File Characteristics

Imports

wininet

winmm

user32

advapi32

kernel32

setupapi

Sections

.text Size: 185KB - Virtual size: 184KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 20KB

.tls Size: 512B - Virtual size: 96KB

.text
Size: 185KB - Virtual size: 184KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 20KB

.tls
Size: 512B - Virtual size: 96KB