dc8cab9c3469fe1b139da56284407623_JaffaCakes118

General

Target

dc8cab9c3469fe1b139da56284407623_JaffaCakes118
Size

194KB
MD5

dc8cab9c3469fe1b139da56284407623
SHA1

0a5ab0f06c9eeabdaf08eabcb06558f3f604a207
SHA256

088b3d1b60cb2816e1542c014c33c4bb3ac48ecf722a1af3906468fa1981f4b2
SHA512

b4f8a26cb20c38704d8592a1cd30a550afcf63c3502290e4187393914325c0cd0b4a27a913025cfaa90e9c99d13a4fdc655ca29a118c14c63a297e728069749f
SSDEEP

3072:U2SaZPRwZ4LBEHXFWv9zvXXUo8A8TszDdpa35BhYkj4DkSZKPKuqmE+:UDasZyq3M1nb8A8TszxIJEhdUJh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc8cab9c3469fe1b139da56284407623_JaffaCakes118

Files

dc8cab9c3469fe1b139da56284407623_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3cc23280c00daf8b139c20c6cd018de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeGetTime
timeSetEvent

kernel32

GetThreadPriority
CreateFiberEx
GetACP
GetDevicePowerState
GetCurrentThread
GetCurrentThreadId
EnumResourceNamesW
IsBadReadPtr
VirtualFree
GetTickCount
GetLastError
WaitForMultipleObjects
SetThreadPriority
FlushFileBuffers
GetSystemTime
CreateSemaphoreA

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

advapi32

CryptDestroyHash
CryptGetHashParam
RegSetValueExA
CryptHashData
CryptCreateHash
CryptImportKey
CryptReleaseContext
GetUserNameA
CryptDestroyKey
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
CryptEncrypt
RegCloseKey

user32

DispatchMessageA
PostThreadMessageA
DestroyWindow
MsgWaitForMultipleObjects
CreateDialogParamA
ReleaseDC
ShowWindow
PeekMessageA
GetDesktopWindow
RegisterWindowMessageA
GetDC
wsprintfA
GetQueueStatus
RealGetWindowClassA
wvsprintfA

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3cc23280c00daf8b139c20c6cd018de

Headers

File Characteristics

Imports

winmm

kernel32

setupapi

advapi32

user32

wininet

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 23KB - Virtual size: 23KB

.tls Size: 512B - Virtual size: 224KB

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 23KB - Virtual size: 23KB

.tls
Size: 512B - Virtual size: 224KB