de531e28f1a75d89dd20591c0bb7b84a_JaffaCakes118

General

Target

de531e28f1a75d89dd20591c0bb7b84a_JaffaCakes118
Size

212KB
MD5

de531e28f1a75d89dd20591c0bb7b84a
SHA1

2d724b06700470eee29ab85620a4a0b32b347993
SHA256

d3e626aff2625aec9424d311ce6abd43bfd4f3372019754afc01b9b12c4baa67
SHA512

0666934473c2ec368f8cb2fe0a82494605ab780115bd3d48f8b4ef5f55d1646a81248be5ebbd4f9efe746b46998f69df9262b1eb13975a5d48431e1da4a31429
SSDEEP

3072:zvl2flQHRveJJvrHDB0v85aPuW9fFJvsN7sAHCYoqtTnyTYqY:bWlQkH6v4aPuCvIAxo76RY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de531e28f1a75d89dd20591c0bb7b84a_JaffaCakes118

Files

de531e28f1a75d89dd20591c0bb7b84a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b21d7514f3ceb853aabbfd2b47db2524

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

RegisterWindowMessageA
ReleaseDC
wsprintfA
GetQueueStatus
PeekMessageA
PostThreadMessageA
RealGetWindowClassW
MsgWaitForMultipleObjects
DestroyWindow
ShowWindow
DispatchMessageA
CreateDialogParamA
GetDC
GetDesktopWindow
wvsprintfA

winmm

timeGetTime
timeSetEvent

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

advapi32

GetUserNameA
RegQueryValueExA
CryptGetHashParam
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
CryptCreateHash
CryptImportKey
CryptReleaseContext
RegEnumValueA
CryptDestroyKey
CryptHashData
RegSetValueExA
RegOpenKeyExA
CryptEncrypt
CryptDestroyHash
RegCloseKey

kernel32

WaitForMultipleObjects
CreateFiber
GetSystemTime
GetCurrentThreadId
SetThreadContext
GetTickCount
IsBadReadPtr
EnumResourceNamesW
VirtualFree
GetACP
GetThreadPriority
lstrcatA
GetLastError
GetCurrentThread
SetThreadPriority
CreateSemaphoreA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b21d7514f3ceb853aabbfd2b47db2524

Headers

File Characteristics

Imports

user32

winmm

setupapi

advapi32

kernel32

wininet

Sections

.text Size: 194KB - Virtual size: 193KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 14KB

.tls Size: 512B - Virtual size: 96KB

.text
Size: 194KB - Virtual size: 193KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 14KB

.tls
Size: 512B - Virtual size: 96KB