699e982f4f6116b8bb2e084aee3e544e_JaffaCakes118

General

Target

699e982f4f6116b8bb2e084aee3e544e_JaffaCakes118
Size

197KB
MD5

699e982f4f6116b8bb2e084aee3e544e
SHA1

de6537b880adb04111fa4e6d6afd8fc73497cb49
SHA256

101432b922a7eb33868daa490f2df8fca83dac44499ee2a9825fe433f2c33c52
SHA512

791320a679da6f9034bad2ae7d33173ceace88a955b222a17fa6b003713e08f8cf9479fe9421cb461106f2ae51493a0b4759ac573764786708c7990e36b71a35
SSDEEP

3072:TpsjsKUNzO656ZmjiBhaL4dCeSt/xFCaO+TDfu5lcntApoe7o9GlXaDAgusgNZtI:aYKUJF56AjYTMFO+HWDoeMfAcKZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
699e982f4f6116b8bb2e084aee3e544e_JaffaCakes118

Files

699e982f4f6116b8bb2e084aee3e544e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73fb35885798afd3fa5734383833d46f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

CreateDialogParamA
MsgWaitForMultipleObjects
RealGetWindowClassA
GetQueueStatus
PeekMessageA
PostThreadMessageA
DestroyWindow
RegisterWindowMessageA
GetDesktopWindow
GetDC
DispatchMessageA
ReleaseDC
ShowWindow
wsprintfA
wvsprintfA

winmm

timeGetTime
timeSetEvent

advapi32

CryptImportKey
CryptReleaseContext
CryptHashData
CryptCreateHash
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
CryptDestroyHash
RegSetValueExA
CryptEncrypt
CryptGetHashParam
RegDeleteValueA
CryptDestroyKey
GetUserNameA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

CreateFiberEx
GetSystemTime
GetThreadPriority
GetDevicePowerState
GetLastError
VirtualFree
GetACP
EnumResourceNamesW
GetCurrentThreadId
IsBadReadPtr
WaitForMultipleObjects
GetCurrentThread
GetTickCount
FlushFileBuffers
SetThreadPriority
CreateSemaphoreA

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73fb35885798afd3fa5734383833d46f

Headers

File Characteristics

Imports

user32

winmm

advapi32

wininet

setupapi

kernel32

Sections

.text Size: 177KB - Virtual size: 177KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 15KB

.tls Size: 512B - Virtual size: 220KB

.text
Size: 177KB - Virtual size: 177KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 15KB

.tls
Size: 512B - Virtual size: 220KB