e0506b32096e959322115278118ad939_JaffaCakes118

General

Target

e0506b32096e959322115278118ad939_JaffaCakes118
Size

210KB
MD5

e0506b32096e959322115278118ad939
SHA1

8584336db4d4e853a02eaf3809e5468d52923fab
SHA256

746c7dcc20aa7a5279e84b60e08d029a0fad22765956a41d5e50f52ee948b908
SHA512

c2380e0f8f5b44e55df42838e2b5e75daf54d69a54d2b3da4d021aeb9deab854608fbb83f70c5dac28f30818219434700df42a26a8e4029c3d576019fee24750
SSDEEP

3072:xrQM5+xNA82Dp4Lo4ouSppXzJAg9y2TARbJqBkSWEJmQdu8Dem/JwzsjVtEBZGVR:xrZ+/c5lZ9y2T8FCkrE9jJww3HAux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0506b32096e959322115278118ad939_JaffaCakes118

Files

e0506b32096e959322115278118ad939_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8d9e542a41355cfd555ca9e4eec230b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

wininet

InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA

user32

DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
RegisterWindowMessageA
RealGetWindowClassW
GetDesktopWindow
GetDC
DestroyWindow
wsprintfA
PostThreadMessageA
GetQueueStatus
CreateDialogParamA
ShowWindow
ReleaseDC
wvsprintfA

kernel32

InterlockedExchange
CreateFiber
FreeLibrary
lstrcmpiA
LoadLibraryW
SuspendThread
WideCharToMultiByte
GetVersionExA
lstrlenW
MultiByteToWideChar
GetVersion
RaiseException
EnumResourceNamesA
GetACP
DeleteCriticalSection
InitializeCriticalSection
SetThreadPriority
lstrlenA
GetProcAddress
GetLocaleInfoA
GetThreadLocale
GetLastError

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8d9e542a41355cfd555ca9e4eec230b

Headers

File Characteristics

Imports

setupapi

wininet

user32

kernel32

advapi32

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 22KB - Virtual size: 22KB

.tls Size: 512B - Virtual size: 96KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 22KB - Virtual size: 22KB

.tls
Size: 512B - Virtual size: 96KB