229093a853be5d1c79ff40f223aea2c4_JaffaCakes118

General

Target

229093a853be5d1c79ff40f223aea2c4_JaffaCakes118
Size

168KB
MD5

229093a853be5d1c79ff40f223aea2c4
SHA1

17e68f40992d8b1a1aef8ad3d1b986184102ee8f
SHA256

656b97a8e96944abf47270de7405533a3d5549514e14fc93111ab73c25b75a3c
SHA512

457efaf58f6eec33d031f92899b3ca707302efc7421c6ae5169842dbf361a3c903a535bf8201788d03df867cd9b2f315e7024858f333bbbaa4ccdd2be174a9a6
SSDEEP

3072:Hf02a6R2l4ii2M23fc2cJD+kIFS45QC1WZNuzzPqkMQWQyB37wgBD1MBKOw1eWB9:HfJY/bHU+FFS4x1WkCkMhQMs81bOwk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
229093a853be5d1c79ff40f223aea2c4_JaffaCakes118

Files

229093a853be5d1c79ff40f223aea2c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7dcdc45c5bdb12737dd8ac241a5f9396

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shell32

SHGetSpecialFolderPathA

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoFreeUnusedLibraries
CoInitialize

kernel32

GetStringTypeW
UpdateResourceW
GetConsoleCP
LoadLibraryW
LCMapStringA
AddAtomA
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetStartupInfoA
HeapFree
GetCommandLineA
HeapSize
GetVersionExA
GetOEMCP
GetConsoleOutputCP
UnhandledExceptionFilter
GetSystemTimeAsFileTime
WideCharToMultiByte
LeaveCriticalSection
GetFileAttributesW
LoadLibraryExW
EnumResourceNamesW
IsValidCodePage
RtlUnwind
IsDebuggerPresent
GetModuleHandleA
TerminateProcess
GetProcessHeap
GetCPInfo
HeapReAlloc
EnterCriticalSection
LCMapStringW
HeapAlloc
FreeLibrary
GetStringTypeA
CheckNameLegalDOS8Dot3W
WriteFile
BeginUpdateResourceW
SetStdHandle
RaiseException
GetModuleFileNameW
GetConsoleMode
SetFilePointer
InterlockedIncrement
VirtualAlloc
GetACP
InterlockedDecrement

Sections

.text
Size: 88KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dcdc45c5bdb12737dd8ac241a5f9396

Headers

File Characteristics

Imports

setupapi

shell32

ole32

kernel32

Sections

.text Size: 88KB - Virtual size: 484KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 484KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB