ea64737a8d65fffb71fd96ba44f92add_JaffaCakes118

General

Target

ea64737a8d65fffb71fd96ba44f92add_JaffaCakes118
Size

212KB
MD5

ea64737a8d65fffb71fd96ba44f92add
SHA1

b1f40141a22ad4d9fafaa277c5d545c1844a7e68
SHA256

e7f1e7ffbdecbfebe1115c3cefeecc94ea27ef7223f3a2fa4f427b8d99d526c1
SHA512

f65a6e4b9c08ec164ee9c2d156b13d9b213ef6e6f43006b8353959aa8fbcbd31c0ea59798b86893755f1190b31f52c8cc563bbd8571f960dd34747a72d67e045
SSDEEP

6144:mLhmrTgnaZioBLy1hTH6Tzs/QccXMahBuB1Oq:mLowmBPs6XiBgq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea64737a8d65fffb71fd96ba44f92add_JaffaCakes118

Files

ea64737a8d65fffb71fd96ba44f92add_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aee4b549a7c59c241c912460b6d27999

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
GetVersionExW
GetSystemTime
CreateFileMappingA
GetExitCodeProcess
CreateFileW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
LocalFree
CreateProcessW
GetModuleHandleW
CreateEventA
MoveFileExW
GetCurrentThreadId
FileTimeToLocalFileTime
GetEnvironmentVariableW
GetCommandLineA
CloseHandle
DeleteFileW
SetEvent
WriteConsoleW
EnumResourceNamesA
GetSystemDirectoryW
WaitForSingleObject
UnmapViewOfFile
LocalAlloc
ReadFileScatter
CreateThread
CreateWaitableTimerA
CopyFileW
LoadLibraryExW
FileTimeToSystemTime
MapViewOfFile
SetFileAttributesW
ResetEvent
CreateFileA

lz32

LZClose
LZCopy
LZOpenFileA

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

Sections

.text
Size: 142KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aee4b549a7c59c241c912460b6d27999

Headers

File Characteristics

Imports

kernel32

lz32

setupapi

advapi32

Sections

.text Size: 142KB - Virtual size: 273KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 134KB - Virtual size: 133KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 273KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 134KB - Virtual size: 133KB

.rsrc
Size: 512B - Virtual size: 4KB