68c9aedfe5eca45bb0734f9d6670d67b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

68c9aedfe5eca45bb0734f9d6670d67b_JaffaCakes118
Size

239KB
MD5

68c9aedfe5eca45bb0734f9d6670d67b
SHA1

91183445f77c32aae25b4fded84f8650971072d8
SHA256

96f7d332c9ea831b324c67652668d3389eb318687e9efbdb4c7874606d564358
SHA512

2cf578844e006f40f5603488595402c77bafe8fddd4650ba6bc2ec7e9115b4a68dd37ca5e0cbf2322ffb4411bbf521b5ae588faff34d9bab625069733a77177f
SSDEEP

6144:cL1l5oB15WOFxOYAkewa4n693+uXnr1OPi9MNC09TZ5:818B1IOvOYRac6VXVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c9aedfe5eca45bb0734f9d6670d67b_JaffaCakes118

Files

68c9aedfe5eca45bb0734f9d6670d67b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

022523275a86121a9ef8a900ec97ae41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeGetTime
timeSetEvent

advapi32

CryptImportKey
RegSetValueExA
CryptCreateHash
CryptHashData
RegEnumKeyExA
CryptDestroyHash
CryptEncrypt
CryptReleaseContext
CryptDestroyKey
RegDeleteValueA
RegQueryValueExA
CryptGetHashParam
RegOpenKeyExA
GetUserNameA
RegCreateKeyExA
RegEnumValueA
RegCloseKey

kernel32

InterlockedIncrement
GetDiskFreeSpaceA
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryExA
LocalFree
GlobalMemoryStatus
ResetEvent
GetFileAttributesA
CreateFiberEx
GetCurrentThreadId
OutputDebugStringA
GetACP
GetLocaleInfoA
GetWindowsDirectoryA
GetLastError
DefineDosDeviceA
GetDevicePowerState
IsBadReadPtr
LeaveCriticalSection
WriteFile
IsBadWritePtr
GetLocalTime
CreateFileA
GetThreadPriority
GetSystemTime
CreateProcessA
FlushInstructionCache
GetVersion
GetSystemInfo
SetLastError
LocalAlloc
VirtualFree
ReadFile
_llseek
GetModuleHandleA
GetVersionExA
GetPrivateProfileStringA
SetThreadPriority
EnumResourceNamesW
lstrlenA
GetTempPathA
CompareStringA
EnterCriticalSection
CreateDirectoryA
CreateSemaphoreA
DeleteFileA
GetModuleFileNameA
InterlockedExchange
CreateThread
FlushFileBuffers
WaitForSingleObject
DeviceIoControl
GetCurrentProcessId
GetComputerNameA
CreateEventA
FreeLibrary
GetCurrentThread
CloseHandle
InterlockedDecrement
LoadLibraryA
VirtualAlloc
SetEvent
Sleep
QueryPerformanceCounter
CreateMutexA
VirtualQuery
WaitForMultipleObjects
GetSystemDirectoryA
QueryDosDeviceA
ReleaseMutex

user32

MsgWaitForMultipleObjects
PostThreadMessageA
GetQueueStatus
GetDesktopWindow
ReleaseDC
DestroyWindow
RegisterWindowMessageA
CreateDialogParamA
PeekMessageA
ShowWindow
wsprintfA
GetDC
DispatchMessageA
RealGetWindowClassA
wvsprintfA

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

gdi32

CreateDIBitmap

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

ole32

CoTaskMemAlloc
BindMoniker
CreateItemMoniker
StgCreateDocfile
CoTaskMemFree
StgOpenStorage
StgIsStorageFile
CoCreateInstance
CoUninitialize
StringFromGUID2
CreateBindCtx
GetRunningObjectTable
CoInitialize

iphlpapi

GetBestInterface
GetAdaptersInfo
SendARP

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

022523275a86121a9ef8a900ec97ae41

Headers

File Characteristics

Imports

winmm

advapi32

kernel32

user32

wininet

gdi32

setupapi

shell32

ole32

iphlpapi

Sections

.text Size: 216KB - Virtual size: 215KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 18KB - Virtual size: 17KB

.tls Size: 512B - Virtual size: 60KB

.text
Size: 216KB - Virtual size: 215KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 18KB - Virtual size: 17KB

.tls
Size: 512B - Virtual size: 60KB