b05a262a22797879b6458d8a8d3bca2f_JaffaCakes118

General

Target

b05a262a22797879b6458d8a8d3bca2f_JaffaCakes118
Size

197KB
MD5

b05a262a22797879b6458d8a8d3bca2f
SHA1

7ac4b24da4a2e0b35a2e73e5abf4a71d3d5b2df1
SHA256

9605d297473b9bfe9eb9715d72e151dc0f3e11abfa83f4f36518cc95eb4a1175
SHA512

ac6ba581480521286fa211b1a494dd8b9e61baece30f498a5fca2258975066a72363702b562b2809314a6f1a4c6718efa4a8177d52ff09ee07777504a80adf8d
SSDEEP

3072:TpsjsKUNzO656ZmjiBhaL4dCeSt/xFCaO+TDfu5lcntApoe7o9GlXaDAgusgNZtI:aYKUJF56AjYTMFO+HWDoeMfAcKZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b05a262a22797879b6458d8a8d3bca2f_JaffaCakes118

Files

b05a262a22797879b6458d8a8d3bca2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73fb35885798afd3fa5734383833d46f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

CreateDialogParamA
MsgWaitForMultipleObjects
RealGetWindowClassA
GetQueueStatus
PeekMessageA
PostThreadMessageA
DestroyWindow
RegisterWindowMessageA
GetDesktopWindow
GetDC
DispatchMessageA
ReleaseDC
ShowWindow
wsprintfA
wvsprintfA

winmm

timeGetTime
timeSetEvent

advapi32

CryptImportKey
CryptReleaseContext
CryptHashData
CryptCreateHash
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
CryptDestroyHash
RegSetValueExA
CryptEncrypt
CryptGetHashParam
RegDeleteValueA
CryptDestroyKey
GetUserNameA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

CreateFiberEx
GetSystemTime
GetThreadPriority
GetDevicePowerState
GetLastError
VirtualFree
GetACP
EnumResourceNamesW
GetCurrentThreadId
IsBadReadPtr
WaitForMultipleObjects
GetCurrentThread
GetTickCount
FlushFileBuffers
SetThreadPriority
CreateSemaphoreA

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73fb35885798afd3fa5734383833d46f

Headers

File Characteristics

Imports

user32

winmm

advapi32

wininet

setupapi

kernel32

Sections

.text Size: 177KB - Virtual size: 177KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 15KB

.tls Size: 512B - Virtual size: 220KB

.text
Size: 177KB - Virtual size: 177KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 15KB

.tls
Size: 512B - Virtual size: 220KB