32231a0e2a3d12a7d99b3341e6215d4b_JaffaCakes118

General

Target

32231a0e2a3d12a7d99b3341e6215d4b_JaffaCakes118
Size

184KB
MD5

32231a0e2a3d12a7d99b3341e6215d4b
SHA1

ee1a99e864d2da8de3ff2692f72470958c342cf7
SHA256

e2d4609b4a6fbff45393b55f2685e38be9a30bd9178012c323a00e7707cc810e
SHA512

a25983ed2769abdfd3ba8a6408c0012ee1818784512aaaf9421944b776721d336698f95407fac9c9623f66b48b5265daaad4216368612cb880878c2f3e933188
SSDEEP

3072:e7cJyLnrh954S56Etfgd6qzEAtQCkqj5IYX/DyJnh3a9seVqbVi9kYw/5xmfhDTq:hsTrD5h/A5zEA3kkKn1anqbP5yB6t7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32231a0e2a3d12a7d99b3341e6215d4b_JaffaCakes118

Files

32231a0e2a3d12a7d99b3341e6215d4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4cff4c701602f650a40ea601f1fd34f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
VirtualFree
GetVolumeInformationA
GetModuleFileNameA
AddAtomA
GetVersionExA
SetFilePointer
DisableThreadLibraryCalls
Sleep
InterlockedIncrement
QueryPerformanceCounter
DeleteCriticalSection
MultiByteToWideChar
GetFileSize
WaitForSingleObject
CreateFileW
CloseHandle
GetLastError
CreateDirectoryA
GetSystemTime
WideCharToMultiByte
GlobalUnlock
InterlockedDecrement
GetTempFileNameA
EnumResourceNamesW
SetFileAttributesA
LocalFree
DeleteFileA
CopyFileA
GetTempPathA
GetModuleFileNameW
GlobalLock
CheckNameLegalDOS8Dot3W
InitializeCriticalSection
lstrlenA
CreateFileA
ReleaseMutex
GetSystemTimeAsFileTime
ReadFile
DeviceIoControl
VirtualAlloc
GetCurrentProcessId
CreateMutexA
GetCurrentThreadId
GetFileAttributesA
GetTickCount
LocalAlloc
FreeLibrary

lz32

LZCopy
LZClose
LZOpenFileA

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 97KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4cff4c701602f650a40ea601f1fd34f

Headers

File Characteristics

Imports

kernel32

lz32

setupapi

Sections

.text Size: 97KB - Virtual size: 236KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 83KB - Virtual size: 83KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 97KB - Virtual size: 236KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 83KB - Virtual size: 83KB

.rsrc
Size: 512B - Virtual size: 4KB