155413ec7273ab8beba122d2519f2e95_JaffaCakes118

General

Target

155413ec7273ab8beba122d2519f2e95_JaffaCakes118
Size

203KB
MD5

155413ec7273ab8beba122d2519f2e95
SHA1

d5983db0ebc73f3bc4783f6df748b7a91b17b0b9
SHA256

7da879782b90c4181c4acac8fa4003ca3704a29ba6540bd3ed0fb10a237e6d6b
SHA512

939bf04d042e06e8967caf3905b90769e6fc7911555b00f81b4c4efb9df5c736836390e9e1794ef77a90a616db1067a14b16fe9a6f8c5119431580ae4856caf2
SSDEEP

6144:sgGB37Ul/fktYno/tJhtV350rEps+8j+2Cl7op3:sjBIut7Tj350rEps+8VCpo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155413ec7273ab8beba122d2519f2e95_JaffaCakes118

Files

155413ec7273ab8beba122d2519f2e95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

206c434f5c0691a9c999210f00d8b845

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetLastError
CreateFiberEx
WaitForMultipleObjects
CancelIo
GetCurrentThreadId
GetSystemTime
EnumResourceNamesW
GetACP
GetTickCount
GetCurrentThread
IsBadReadPtr
VirtualFree
SetThreadPriority
FlushFileBuffers
GetThreadPriority
CreateSemaphoreA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA

advapi32

CryptCreateHash
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
CryptHashData
CryptReleaseContext
CryptEncrypt
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
CryptImportKey
GetUserNameA
CryptGetHashParam
CryptDestroyHash
RegDeleteValueA
CryptDestroyKey
RegCloseKey

winmm

timeGetTime
timeSetEvent

user32

GetDC
RegisterWindowMessageA
GetQueueStatus
MsgWaitForMultipleObjects
ReleaseDC
PeekMessageA
wsprintfA
GetDesktopWindow
CreateDialogParamA
RealGetWindowClassA
DispatchMessageA
PostThreadMessageA
ShowWindow
DestroyWindow
wvsprintfA

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

206c434f5c0691a9c999210f00d8b845

Headers

File Characteristics

Imports

setupapi

kernel32

wininet

advapi32

winmm

user32

Sections

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 15KB

.tls Size: 512B - Virtual size: 224KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 15KB

.tls
Size: 512B - Virtual size: 224KB