272f2979b94ceef3a624e7f9b8f7ed16_JaffaCakes118

General

Target

272f2979b94ceef3a624e7f9b8f7ed16_JaffaCakes118
Size

168KB
MD5

272f2979b94ceef3a624e7f9b8f7ed16
SHA1

d66a462ca0e8b7634f514e5c2b67541683db1635
SHA256

87a7d4d5773b6e78052da2cdc29196130f1e40977d49862f2c7f00ea9096a7a4
SHA512

918c2e22f67bff7776d391d78add0c218dc408e4efe555dc261dc8e686167df42b4415bdfce6640bbfbb7e78c5faf4118e6b7438821a719eab628789f9388a29
SSDEEP

3072:vYnU+J37hIyf8qnFjftY5LFdUp56X3ucvC8dD4HteYLYBQO2LYu2FJnfzl5rQotr:hghI2bKLFdU+XD4Hte+YyLYucnfpqotr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
272f2979b94ceef3a624e7f9b8f7ed16_JaffaCakes118

Files

272f2979b94ceef3a624e7f9b8f7ed16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6c271ffa8ebc8facc03e52d58ab08e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

lz32

LZClose
LZCopy
LZOpenFileA

kernel32

QueryPerformanceCounter
DisableThreadLibraryCalls
DeviceIoControl
MultiByteToWideChar
GlobalUnlock
GetVolumeInformationA
InterlockedIncrement
GetModuleFileNameW
AddAtomA
WideCharToMultiByte
lstrlenA
LocalAlloc
GetFileSize
GetVersionExA
GetTempFileNameA
ReleaseMutex
GetLastError
GetModuleFileNameA
GetSystemTime
GetTempPathA
Sleep
LocalFree
CreateDirectoryA
CreateMutexA
GetCurrentProcessId
InitializeCriticalSection
GlobalFree
GetCurrentThreadId
EnumResourceNamesW
VirtualFree
InterlockedDecrement
GetTickCount
CloseHandle
CreateFileA
SetFilePointer
ReadFile
CheckNameLegalDOS8Dot3W
GetFileAttributesA
GlobalLock
CreateFileW
CopyFileA
SetFileAttributesA
DeleteFileA
GetSystemTimeAsFileTime
WaitForSingleObject
DeleteCriticalSection
VirtualAlloc
FreeLibrary

Sections

.text
Size: 88KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6c271ffa8ebc8facc03e52d58ab08e8

Headers

File Characteristics

Imports

setupapi

lz32

kernel32

Sections

.text Size: 88KB - Virtual size: 484KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 484KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB