7161824c912a813366c5ed92abd27eb8_JaffaCakes118

General

Target

7161824c912a813366c5ed92abd27eb8_JaffaCakes118
Size

184KB
MD5

7161824c912a813366c5ed92abd27eb8
SHA1

18eca739993dd178a0d56fc2d3a6e2efa8415389
SHA256

7c3ca85e184833417510c2a358bb25e5af20a908432dfc5ed3eac0d310a69dd0
SHA512

e55fef7f872f55280a5a21980ea8029109ea88e0152461876fa36f8c157d9c8291d82cfbaf00a6334d3ddc09b2c753f0a5b423b1c733db719ceaf53d812202b8
SSDEEP

3072:aJQ1/z3HPo1oIq7Pb6SA0Qpveqct0wisYAko2Kj8M6kSPkS8Wf6:aG1/D8w/GvO0lyko9j8/PkS8WC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7161824c912a813366c5ed92abd27eb8_JaffaCakes118

Files

7161824c912a813366c5ed92abd27eb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9ab1f14643c4b53936867d9e905b8c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetModuleFileNameW
ReleaseMutex
CreateMutexA
VirtualAlloc
GetVersionExA
GetCurrentProcessId
AddAtomW
GetTickCount
WaitForSingleObject
GetVolumeInformationA
CopyFileA
CreateDirectoryA
GetCurrentThreadId
GetSystemTime
GetTempPathA
CreateFileA
GlobalLock
InterlockedIncrement
DeleteFileA
Sleep
GlobalFree
GetTempFileNameA
DeviceIoControl
MultiByteToWideChar
SetFileAttributesA
QueryPerformanceCounter
CreateFileW
LocalFree
EnumResourceNamesA
LocalAlloc
CloseHandle
InterlockedDecrement
DeleteCriticalSection
DisableThreadLibraryCalls
SetFilePointer
CheckNameLegalDOS8Dot3W
GetSystemTimeAsFileTime
WideCharToMultiByte
GetFileSize
ReadFile
GlobalUnlock
lstrlenA
GetFileAttributesA
VirtualFree
GetModuleFileNameA
InitializeCriticalSection
GetLastError
FreeLibrary

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

Sections

.text
Size: 97KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9ab1f14643c4b53936867d9e905b8c6

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

lz32

Sections

.text Size: 97KB - Virtual size: 237KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 83KB - Virtual size: 82KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 97KB - Virtual size: 237KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 83KB - Virtual size: 82KB

.rsrc
Size: 512B - Virtual size: 4KB