6723531dc48fccf74f654a3ceab8103a_JaffaCakes118

General

Target

6723531dc48fccf74f654a3ceab8103a_JaffaCakes118
Size

185KB
MD5

6723531dc48fccf74f654a3ceab8103a
SHA1

afd94b8f50906d0df7669fb911167f2ae0da82e9
SHA256

e77a71e7dfa680732832f4e305f7ca57045788e1e97248f5569378bb8273ebbe
SHA512

dfae3c0585de66b042ab91884877637bf721c2fe3e9c0fd907bd48f3fba0eb291e1ddc035cf0dae4fa9af8abe1684af17364d8a05bb467b2ebdfe012ea4f99c7
SSDEEP

3072:x5BKDKGBj070UzeZ/fVd24/pzZwXJuDEgzw/KkBsg9AjsGgKzg3e1gNrsiVmoboh:J4R07Xy/fz/p1Cuu59+jySiHjx16J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6723531dc48fccf74f654a3ceab8103a_JaffaCakes118

Files

6723531dc48fccf74f654a3ceab8103a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6af2c29af5de496b62328e6c80f8d96c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FlushFileBuffers
AddAtomW
SetFilePointer
TlsGetValue
GetACP
GetFileType
GetFileAttributesA
IsBadCodePtr
UnhandledExceptionFilter
ReadFile
GetThreadLocale
WriteFile
TerminateProcess
GetFullPathNameA
LCMapStringA
FreeEnvironmentStringsW
VirtualProtect
GetStringTypeA
TlsSetValue
SetHandleCount
SetStdHandle
IsBadReadPtr
GetEnvironmentStringsW
EnumResourceNamesA
GetVersionExA
GetModuleFileNameA
SetUnhandledExceptionFilter
GetOEMCP
GetStartupInfoA
WideCharToMultiByte
HeapSize
LCMapStringW
WriteFileGather
GetStringTypeW
GetCurrentProcess
FindFirstFileA
GetEnvironmentStrings
CreateFileA
GetCPInfo
GetStdHandle
GetLocaleInfoA
GetDiskFreeSpaceA

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

lz32

LZCopy
LZClose
LZOpenFileA

advapi32

RegQueryValueA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey

Sections

.text
Size: 101KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6af2c29af5de496b62328e6c80f8d96c

Headers

File Characteristics

Imports

kernel32

setupapi

lz32

advapi32

Sections

.text Size: 101KB - Virtual size: 236KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 101KB - Virtual size: 236KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 512B - Virtual size: 4KB