15d26d88b257b9ffff92e90c6fa277ae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15d26d88b257b9ffff92e90c6fa277ae_JaffaCakes118
Size

400KB
MD5

15d26d88b257b9ffff92e90c6fa277ae
SHA1

1f477b148782d9276b598b9ffd61b7e090068b29
SHA256

a92e5cca79477612423d3a43e8dcb12c88c0fddcbcf9455e0b883be2f2e839ec
SHA512

f6dc4c9b1d5a40e93a0a08fa832f7ecbed8462edc65a8b77c745d10e116b54a4fed18dbf3cd909aaf8a5f37e1638ed4b112fa5adc4f6cffc5b79bfb013797344
SSDEEP

6144:KZDOIkGtBFVa1TXNsCqremfjbfuhmCjdoDZ6KS1ynnrvRUHZ3WwE:8Jyqrxfu3e3S1ynnrv2Z3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d26d88b257b9ffff92e90c6fa277ae_JaffaCakes118

Files

15d26d88b257b9ffff92e90c6fa277ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372aab195f415c6d61a6864e01babda5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileTime
GetFileType
GetLocalTime
GetLocaleInfoW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLangID
GetVersionExW
GetVolumeInformationW
GlobalAlloc
CompareStringA
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryExW
LocalFree
MapViewOfFile
MoveFileW
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW
CompareFileTime
GlobalFree
CloseHandle

user32

GetActiveWindow
GetKeyboardType
MsgWaitForMultipleObjects
PeekMessageW
SendMessageW
TranslateMessage
CharNextW
ExitWindowsEx
DispatchMessageW
CharUpperW
PostMessageW
CharUpperA
CharLowerA

shell32

SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteW
SHGetFolderPathW

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW
InternetGetConnectedState
InternetQueryOptionA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

setupapi

SetupDiSetSelectedDriverW
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupFindFirstLineW
SetupDiGetDriverInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstallParamsW
SetupGetStringFieldW
SetupOpenFileQueue
SetupOpenInfFileW
SetupScanFileQueueW
SetupDiInstallDriverFiles
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiBuildDriverInfoList
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Locate_DevNodeW
SetupCloseFileQueue
SetupCloseInfFile

shlwapi

UrlGetPartW
StrCmpW
StrRChrW
StrChrW
StrCmpIW
StrToIntExW
PathStripToRootW
PathRemoveBackslashW
PathIsUNCW
StrStrIW
PathIsRootW
PathIsRelativeW
PathFindExtensionW

oleaut32

SysAllocString
SysStringLen
VarR8FromI1
VariantClear
VariantInit
SysFreeString

msvfw32

ICCompressorFree

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

372aab195f415c6d61a6864e01babda5

Headers

File Characteristics

Imports

kernel32

user32

shell32

wininet

ole32

crypt32

setupapi

shlwapi

oleaut32

msvfw32

Sections

.text Size: 296KB - Virtual size: 296KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 16KB - Virtual size: 100KB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 296KB - Virtual size: 296KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 16KB - Virtual size: 100KB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB