6a81a282f9862b8a7c957524de0c90a7_JaffaCakes118

General

Target

6a81a282f9862b8a7c957524de0c90a7_JaffaCakes118
Size

279KB
MD5

6a81a282f9862b8a7c957524de0c90a7
SHA1

d71ad8bea3d54dfd5f546794459d3c6e896c5e4f
SHA256

4d05d884704f2065b17624be1004b6fd46919c839e3b222a50e873e6cf07a8e5
SHA512

7457ef502dd4ccae537c7907be7989088983e1b28be1292fd4bb37483fe90191bcbb49808efb26819b9d5cf16b2ae6d4d81db71d70e9f03eccdf764a7bd1a04b
SSDEEP

6144:mLimrTgnaZioBLy1hTH6Tzs/QccXMahBuB1O4jbnRWwtbC:mL5wmBPs6XiBgun1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a81a282f9862b8a7c957524de0c90a7_JaffaCakes118

Files

6a81a282f9862b8a7c957524de0c90a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aee4b549a7c59c241c912460b6d27999

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
GetVersionExW
GetSystemTime
CreateFileMappingA
GetExitCodeProcess
CreateFileW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
LocalFree
CreateProcessW
GetModuleHandleW
CreateEventA
MoveFileExW
GetCurrentThreadId
FileTimeToLocalFileTime
GetEnvironmentVariableW
GetCommandLineA
CloseHandle
DeleteFileW
SetEvent
WriteConsoleW
EnumResourceNamesA
GetSystemDirectoryW
WaitForSingleObject
UnmapViewOfFile
LocalAlloc
ReadFileScatter
CreateThread
CreateWaitableTimerA
CopyFileW
LoadLibraryExW
FileTimeToSystemTime
MapViewOfFile
SetFileAttributesW
ResetEvent
CreateFileA

lz32

LZClose
LZCopy
LZOpenFileA

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

Sections

.text
Size: 142KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aee4b549a7c59c241c912460b6d27999

Headers

File Characteristics

Imports

kernel32

lz32

setupapi

advapi32

Sections

.text Size: 142KB - Virtual size: 273KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 134KB - Virtual size: 133KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 273KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 134KB - Virtual size: 133KB

.rsrc
Size: 512B - Virtual size: 4KB