0e93d991911d94fc82be30a0ca66dd38_JaffaCakes118

General

Target

0e93d991911d94fc82be30a0ca66dd38_JaffaCakes118
Size

186KB
MD5

0e93d991911d94fc82be30a0ca66dd38
SHA1

042132276754a96359f2a4dc88367db367dc4f92
SHA256

0e30066a1dab047fc719344e3e528d47646faa535234d3dd3967e95626db0985
SHA512

ed70faa7b2f1e5b49b11d1ea2509cdd9b4f7fadbc5fa8d82a1804c979618f24991aac9bfb6c63dc35ecc70c06fd654cc1871d00215492387350102ee3714ecbd
SSDEEP

3072:pTcVc70Qt2rySj6dAZiHVapcU0iPawr0CvI2eZZ9AAFHZyOSMZ0eUDOT4nOLqWP:pKcIQYe8jcMpIPOXIjZZ2ApMxMy/yqW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e93d991911d94fc82be30a0ca66dd38_JaffaCakes118

Files

0e93d991911d94fc82be30a0ca66dd38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5967cdf65aa051711d643fab4d7fe5a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

user32

PostThreadMessageA
CreateDialogParamA
ReleaseDC
RegisterWindowMessageA
GetDC
PeekMessageA
wsprintfA
ShowWindow
RealGetWindowClassW
MsgWaitForMultipleObjects
DestroyWindow
GetQueueStatus
GetDesktopWindow
DispatchMessageA
wvsprintfA

winmm

timeGetTime
timeSetEvent

advapi32

RegQueryValueExA
CryptReleaseContext
RegSetValueExA
RegEnumValueA
CryptDestroyHash
CryptImportKey
RegOpenKeyExA
CryptCreateHash
RegCreateKeyExA
RegDeleteValueA
CryptGetHashParam
CryptHashData
CryptDestroyKey
RegEnumKeyExA
GetUserNameA
CryptEncrypt
RegCloseKey

kernel32

GetCurrentThread
CreateFiber
GetTickCount
SetThreadContext
GetSystemTime
SetThreadPriority
EnumResourceNamesW
GetCurrentThreadId
GetThreadPriority
WaitForMultipleObjects
IsBadReadPtr
GetACP
GetLastError
lstrcatA
VirtualFree
CreateSemaphoreA

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5967cdf65aa051711d643fab4d7fe5a2

Headers

File Characteristics

Imports

wininet

user32

winmm

advapi32

kernel32

setupapi

Sections

.text Size: 170KB - Virtual size: 169KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 13KB - Virtual size: 12KB

.tls Size: 512B - Virtual size: 72KB

.text
Size: 170KB - Virtual size: 169KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 13KB - Virtual size: 12KB

.tls
Size: 512B - Virtual size: 72KB