JaffaCakes118_6b0b3dd56fab03cde50f1e5f0ef83a8a

General

Target

JaffaCakes118_6b0b3dd56fab03cde50f1e5f0ef83a8a
Size

188KB
MD5

6b0b3dd56fab03cde50f1e5f0ef83a8a
SHA1

cf621596ee2595ae6ad39cb630462e50d08716f1
SHA256

4e644b128a71282f5b8fb048f76bad571129bc8001a38ac5aafab1043fd69e3d
SHA512

b6115da8239eadd71ffa68cbaf90104521a0a95ceeeb67ccdd77cb831de8b42457f67488508ff51615b345574032cac4e021c919b8360d04af0522db71252662
SSDEEP

3072:VOYG9vqBBZM3F7zFetXw6ttCPFs7toHBK7g7v6On6:VOYoaBZERUgktCK54GgW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6b0b3dd56fab03cde50f1e5f0ef83a8a

Files

JaffaCakes118_6b0b3dd56fab03cde50f1e5f0ef83a8a
.exe windows:4 windows x86 arch:x86

a2f3724b4b7f7f45702ad011dcd1060f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeGetTime
timeSetEvent

user32

CreateDialogParamA
RealGetWindowClassA
wsprintfA
PeekMessageA
GetDC
GetDesktopWindow
DestroyWindow
PostThreadMessageA
ShowWindow
DispatchMessageA
ReleaseDC
RegisterWindowMessageA
GetQueueStatus
MsgWaitForMultipleObjects
wvsprintfA

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

kernel32

GetCurrentThread
CreateFiberEx
SetThreadPriority
CancelIo
IsBadReadPtr
GetACP
EnumResourceNamesW
GetThreadPriority
VirtualFree
WaitForMultipleObjects
GetSystemTime
GetTickCount
GetCurrentThreadId
FlushFileBuffers
GetLastError
CreateSemaphoreA

setupapi

SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

advapi32

RegCreateKeyExA
CryptImportKey
RegDeleteValueA
CryptGetHashParam
RegEnumKeyExA
RegSetValueExA
RegEnumValueA
CryptDestroyKey
CryptEncrypt
CryptDestroyHash
CryptCreateHash
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
GetUserNameA
CryptHashData
RegCloseKey

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2f3724b4b7f7f45702ad011dcd1060f

Headers

File Characteristics

Imports

winmm

user32

wininet

kernel32

setupapi

advapi32

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 17KB

.tls Size: 512B - Virtual size: 80KB

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 17KB

.tls
Size: 512B - Virtual size: 80KB