68d7a8caff672c0eebae4a19698ecc14_JaffaCakes118

General

Target

68d7a8caff672c0eebae4a19698ecc14_JaffaCakes118
Size

185KB
MD5

68d7a8caff672c0eebae4a19698ecc14
SHA1

4ec7aefbc65c38c8e016e8cdb8944e1fce51b600
SHA256

8b3af229d475e8aafd574ffd1b9a883aa6a140b9fd60db4d15c3aeff745aaece
SHA512

47e2f38894be43cd8c350d09786d21585fc85a1034e4274aa56a230f21a387bc9b9f7acd809158690399333236b2d1e36a6788a42d59e1b466d696c18c6f2de3
SSDEEP

3072:tJVAU1iRfM+yI2qSWQRwwucZw3Xr0I7eb2KgluCNOMjlKaCMFR/Xa5LuPqHm4:PVIfVyI2q6RScgXoIDKRCNOelPFR/qB9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d7a8caff672c0eebae4a19698ecc14_JaffaCakes118

Files

68d7a8caff672c0eebae4a19698ecc14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97f290408e4fd47e504291fdd9ece253

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

lz32

LZCopy
LZClose
LZOpenFileA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey

kernel32

LoadLibraryExW
GetEnvironmentVariableW
UnmapViewOfFile
WriteConsoleW
WaitForSingleObject
AddAtomW
SetFileAttributesW
SetEvent
CreateProcessW
CloseHandle
CreateThread
CopyFileW
GetExitCodeProcess
GetTempPathW
LocalAlloc
LocalFree
MoveFileExW
MapViewOfFile
FileTimeToLocalFileTime
GetSystemDirectoryW
EnumResourceNamesA
GetSystemTime
CreateFileMappingA
FileTimeToSystemTime
CreateDirectoryW
GetVersionExW
GetCurrentThreadId
WriteFileGather
GetCommandLineA
CreateEventA
CreateFileW
GetFileAttributesW
GetModuleHandleW
ResetEvent
DeleteFileW
CreateWaitableTimerA
CreateFileA

Sections

.text
Size: 101KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97f290408e4fd47e504291fdd9ece253

Headers

File Characteristics

Imports

setupapi

lz32

advapi32

kernel32

Sections

.text Size: 101KB - Virtual size: 241KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 81KB - Virtual size: 80KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 101KB - Virtual size: 241KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 81KB - Virtual size: 80KB

.rsrc
Size: 512B - Virtual size: 4KB