300a2271eeb7dd172e95c5d942e808d3_JaffaCakes118

General

Target

300a2271eeb7dd172e95c5d942e808d3_JaffaCakes118
Size

201KB
MD5

300a2271eeb7dd172e95c5d942e808d3
SHA1

558315e61e5e0c7612b2321e0250d7ecb6912aa8
SHA256

e59830ae2938919031ae08242e7da80dcf327f3a6a20252bc6424c61a7179b45
SHA512

4cf94ad429057d006c04bc2be7837018149f3f8a8a1097492a3a02928dc86354cb680849c1c170de86305bb50c3706c9c2d49519cdfe3ad5adb43a362a7db08b
SSDEEP

6144:hCaI19o40puJtr6kfmZ7H+NtsjOhlNP18:ZI19ZJQT7H+NKKhf18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
300a2271eeb7dd172e95c5d942e808d3_JaffaCakes118

Files

300a2271eeb7dd172e95c5d942e808d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c17d95fcaf3425bb8c7fe8e0ff90f980

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

winmm

timeGetTime
timeSetEvent

advapi32

RegDeleteValueA
CryptImportKey
CryptEncrypt
RegSetValueExA
RegEnumKeyExA
CryptDestroyHash
RegEnumValueA
RegCreateKeyExA
CryptHashData
CryptDestroyKey
GetUserNameA
CryptGetHashParam
RegOpenKeyExA
RegQueryValueExA
CryptCreateHash
CryptReleaseContext
RegCloseKey

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

IsBadReadPtr
CreateFiber
GetSystemTime
GetCurrentThreadId
SetThreadContext
GetLastError
EnumResourceNamesW
GetTickCount
GetThreadPriority
VirtualFree
SetThreadPriority
lstrcatA
WaitForMultipleObjects
GetACP
GetCurrentThread
CreateSemaphoreA

user32

GetDesktopWindow
GetDC
wsprintfA
DestroyWindow
RealGetWindowClassW
MsgWaitForMultipleObjects
ReleaseDC
PostThreadMessageA
CreateDialogParamA
PeekMessageA
ShowWindow
GetQueueStatus
DispatchMessageA
RegisterWindowMessageA
wvsprintfA

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c17d95fcaf3425bb8c7fe8e0ff90f980

Headers

File Characteristics

Imports

wininet

winmm

advapi32

setupapi

kernel32

user32

Sections

.text Size: 171KB - Virtual size: 170KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 26KB

.tls Size: 512B - Virtual size: 228KB

.text
Size: 171KB - Virtual size: 170KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 26KB

.tls
Size: 512B - Virtual size: 228KB