2f13ea292e54b00ad1be6d422d2fe5a5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2f13ea292e54b00ad1be6d422d2fe5a5_JaffaCakes118
Size

1.2MB
MD5

2f13ea292e54b00ad1be6d422d2fe5a5
SHA1

573b680fd911682043b766e3b3bd346047074864
SHA256

ea861166541d7f9b1ec8ce82c3fc489a6b515eb091a5843d3bfc56f54882c250
SHA512

f9abebd58eea2bc40e3506ea348ebcc3d6d9035eba21bc30e892660779cdb58c45fc7d0163e48ee47f94e415dc8132b7f20f00ece04319067e5debca915850ae
SSDEEP

24576:oKvhvhdFGNYJn9qYa87hCVPJyTntCC21jJiK:oePbeG9qJIwVPJ4tQjJiK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f13ea292e54b00ad1be6d422d2fe5a5_JaffaCakes118

Files

2f13ea292e54b00ad1be6d422d2fe5a5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f681ac7aca91a39e0ebb3384636264e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupGetFieldCount
SetupOpenFileQueue
SetupCloseFileQueue
SetupInstallFromInfSectionW
SetupDiCreateDeviceInfoListExW
SetupDiGetDeviceInfoListDetailW
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiGetSelectedDriverW
SetupDiGetClassDevsW
SetupDiGetClassDevsExW
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiGetActualSectionToInstallW
CM_Get_Parent
CM_Get_Parent_Ex
SetupGetIntField

crypt32

CryptStringToBinaryW
CertVerifyCertificateChainPolicy
CryptHashPublicKeyInfo
CryptExportPKCS8
CertControlStore
CertAddStoreToCollection
CertAddEncodedCertificateToStore
CertCreateCertificateContext
CertEnumCertificatesInStore
CertOpenStore
CryptMsgGetParam
CryptFindOIDInfo
CryptDecodeObjectEx

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey

shlwapi

StrPBrkW
StrRChrW
StrStrW
StrToIntW
StrCmpIW
PathIsDirectoryW
PathIsNetworkPathW
PathIsUNCServerW
PathRemoveBackslashW
PathRemoveBlanksW
PathRemoveExtensionW
PathStripPathW
PathStripToRootW
UrlIsW
UrlUnescapeW
SHDeleteEmptyKeyW
SHDeleteKeyW
SHDeleteValueW
AssocCreate
StrFormatByteSizeW

kernel32

LoadLibraryExW
RtlUnwind
OutputDebugStringW
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
ReleaseSemaphore
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
GetModuleHandleW
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetProcAddress
GlobalFree
VirtualAlloc
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
GetEnvironmentStringsW
GetCurrentThreadId
GetLastError
InitializeCriticalSection
EnterCriticalSection
WriteConsoleW
WaitForSingleObject
SetHandleCount
WriteFile
CloseHandle
MulDiv
TlsFree
CreateDirectoryW
CreateFileW
GetFileAttributesW
GetACP
GetLocaleInfoW
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 261KB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eg1b
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.w7e1
Size: 206KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f681ac7aca91a39e0ebb3384636264e6

Headers

File Characteristics

Imports

setupapi

crypt32

advapi32

shlwapi

kernel32

Sections

.text Size: 65KB - Virtual size: 64KB

.data Size: 261KB - Virtual size: 7.1MB

.idata Size: 4KB - Virtual size: 3KB

.xdata Size: 1024B - Virtual size: 724B

.eg1b Size: 292KB - Virtual size: 292KB

.w7e1 Size: 206KB - Virtual size: 208KB

.rsrc Size: 364KB - Virtual size: 364KB

.text
Size: 65KB - Virtual size: 64KB

.data
Size: 261KB - Virtual size: 7.1MB

.idata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 1024B - Virtual size: 724B

.eg1b
Size: 292KB - Virtual size: 292KB

.w7e1
Size: 206KB - Virtual size: 208KB

.rsrc
Size: 364KB - Virtual size: 364KB