2d2ca74fd48f4981e87033b17d2d9cc0_JaffaCakes118

General

Target

2d2ca74fd48f4981e87033b17d2d9cc0_JaffaCakes118
Size

173KB
MD5

2d2ca74fd48f4981e87033b17d2d9cc0
SHA1

9207c71679311c0ccc61fd6743f21ed692a10d0a
SHA256

f208f04f82d1fb8180cbd83dfbc37b49f2c413388f5a7d18ffefe0ba2056f730
SHA512

a106ade3acd0a8d64a6a735d7eecf552e47764e051f01d070e1953184adcc5460c457b1545d384e12ad575d166b9628881af0d888909c1f86ccbd249d5be193e
SSDEEP

3072:vqJMK9aXdNaqsx80Jjx/OR+emt+q+xXvMYUZ/IqPVJO4rWW7G6lL8chRLFo7:vmMSEPaz8kKBxXhUpNyQZ9lLJrL+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2ca74fd48f4981e87033b17d2d9cc0_JaffaCakes118

Files

2d2ca74fd48f4981e87033b17d2d9cc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05710dfd13ff8ec06047852edc9fd5e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetVersionExA
DeviceIoControl
DisableThreadLibraryCalls
LocalFree
AddAtomW
GetSystemTimeAsFileTime
InterlockedIncrement
GetModuleFileNameA
GetTempPathA
GetSystemTime
GetCurrentThreadId
Sleep
CreateMutexA
InitializeCriticalSection
WaitForSingleObject
InterlockedDecrement
GetFileSize
DeleteCriticalSection
CreateDirectoryA
WideCharToMultiByte
EnumResourceNamesA
GlobalLock
lstrlenA
CloseHandle
ReadFile
QueryPerformanceCounter
GetCurrentProcessId
CopyFileA
GetVolumeInformationA
VirtualFree
SetFileAttributesA
GetFileAttributesA
VirtualAlloc
GetLastError
CreateFileA
GetModuleFileNameW
LocalAlloc
WriteFileGather
GlobalFree
GetTempFileNameA
MultiByteToWideChar
GetTickCount
ReleaseMutex
SetFilePointer
DeleteFileA
GlobalUnlock
CreateFileW
FreeLibrary

advapi32

RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

Sections

.text
Size: 93KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05710dfd13ff8ec06047852edc9fd5e2

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

lz32

Sections

.text Size: 93KB - Virtual size: 233KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 76KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 233KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 76KB

.rsrc
Size: 512B - Virtual size: 4KB