599ae6b94dc829a76fd39b9a3b9add9a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

599ae6b94dc829a76fd39b9a3b9add9a_JaffaCakes118
Size

83KB
MD5

599ae6b94dc829a76fd39b9a3b9add9a
SHA1

7e19c3832aa00c6043507bd230afef8bfa51da4f
SHA256

dabc8403c53968ed3909175acf6c09f3cb6a9cd40c4160bec780390cf411171b
SHA512

c8d2d705da59ca3cb842ed1294e8fc6ed217660c20664218422e705cf43919314e8076cc2268547a3277d9813beaf2105a451e90e95f6a0582e666a892fe2062
SSDEEP

1536:rBOoDOxFum0PaEVfNvgGmiI+foLim9sLDeeM+ifjuYwAyQdx/:rTO/maEVfdmlr+m9sLDeenif6vQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
599ae6b94dc829a76fd39b9a3b9add9a_JaffaCakes118

Files

599ae6b94dc829a76fd39b9a3b9add9a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

309ffc9a8988497b1bc857e1cb3a51b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupFindFirstLineA
SetupDiInstallClassExW
pSetupCaptureAndConvertAnsiArg
InstallCatalog
SetupCopyOEMInfW
SetupCopyOEMInfA
CM_Remove_SubTree_Ex
SetupQueueDefaultCopyA
SetupDiOpenDeviceInterfaceA
CM_Query_Arbitrator_Free_Size
SetupDiGetClassDevPropertySheetsA
SetupFindNextMatchLineA
CM_Delete_Class_Key
CM_Get_Class_Name_ExA
SetupQuerySourceListA
SetupGetLineByIndexA
SetupQueueRenameA
pSetupGetInfSections
CMP_UnregisterNotification
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiGetActualSectionToInstallExA
SetupInstallFileA
CM_Enumerate_Enumerators_ExW
CM_Get_Class_NameW

kernel32

GlobalAlloc
ReadFile
GlobalReAlloc
GetLocaleInfoA
GetPrivateProfileIntA
DisableThreadLibraryCalls
LoadLibraryA
EnumResourceNamesW
_lwrite
FindNextVolumeMountPointW
GetProfileStringW
ExpungeConsoleCommandHistoryA
GetFileSize
CreateJobObjectA
VirtualAlloc
FindFirstFileA
SetConsoleScreenBufferSize

shlwapi

PathMatchSpecW
PathCompactPathExW
PathIsUNCA
SHDeleteValueA
SHLoadIndirectString
StrCatW
StrChrNW
SHRegOpenUSKeyW
SHQueryInfoKeyA
UrlCanonicalizeW
PathCreateFromUrlW
PathUnquoteSpacesA
PathRemoveFileSpecA
StrStrNIW

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

309ffc9a8988497b1bc857e1cb3a51b4

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

shlwapi

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 25KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 328B

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 25KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 328B