24df6e6521bc873a2ad74bed9c5d99aa_JaffaCakes118

General

Target

24df6e6521bc873a2ad74bed9c5d99aa_JaffaCakes118
Size

174KB
MD5

24df6e6521bc873a2ad74bed9c5d99aa
SHA1

167a45d3ac28ea6bcc62fffd4412cf7225c4740b
SHA256

8ce019affc7570013945e023ae72bd93ef84bffafca9132e8e1b42434ef960f9
SHA512

6cb1f982623db3c28128209879f1cff803aedb31a0aea85d1f50213d0101881b03e1330da2620d9acbb71e339f2c6b64fec054ab07c6354c6cc3485c37d130bb
SSDEEP

3072:gczGLcTDbYkHRGLdqbIngTSLTVuCTnztmmJ67l8fR/0Q89Ru5Ze:gkGozH4Lw8ngTS34CTzqI0lRu5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24df6e6521bc873a2ad74bed9c5d99aa_JaffaCakes118

Files

24df6e6521bc873a2ad74bed9c5d99aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8490f963a114b014fe2d4badb2744df1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

AddAtomW
ReadFile
CreateFileW
CopyFileA
GetModuleFileNameW
GlobalLock
CreateFileA
VirtualFree
GetTickCount
DeleteFileA
GetSystemTimeAsFileTime
ReleaseMutex
LocalAlloc
VirtualAlloc
CreateMutexA
InterlockedDecrement
GlobalUnlock
WideCharToMultiByte
GetSystemTime
GetCurrentProcessId
GetCurrentThreadId
EnumResourceNamesA
InterlockedIncrement
lstrlenA
LocalFree
GetVolumeInformationA
SetFileAttributesA
InitializeCriticalSection
GetModuleFileNameA
DeviceIoControl
GetFileSize
CheckNameLegalDOS8Dot3W
Sleep
GetFileAttributesA
CloseHandle
SetFilePointer
GetTempFileNameA
WaitForSingleObject
DeleteCriticalSection
QueryPerformanceCounter
GetLastError
MultiByteToWideChar
GetVersionExA
GlobalFree
GetTempPathA
CreateDirectoryA
DisableThreadLibraryCalls
FreeLibrary

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

lz32

LZClose
LZCopy
LZOpenFileA

Sections

.text
Size: 94KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8490f963a114b014fe2d4badb2744df1

Headers

File Characteristics

Imports

advapi32

kernel32

setupapi

lz32

Sections

.text Size: 94KB - Virtual size: 238KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 94KB - Virtual size: 238KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB