88050ca829f319771732994cc61e8395_JaffaCakes118

General

Target

88050ca829f319771732994cc61e8395_JaffaCakes118
Size

184KB
MD5

88050ca829f319771732994cc61e8395
SHA1

6b0b8e123eeae044ca07898f120ac6a5d7f8016c
SHA256

2e9bd3da7df959ed75e694071ccdb95a4149cf10e2ba8cbdc992594ad9243e4b
SHA512

b30a7ba274687521eed4fd94942d9979f6e014a327c699083e633d4d099bc12b3f0f7e283746af08e159e8b3aaa242fecba087608d82653636a3efb2cab38fad
SSDEEP

3072:YeoCJOFLC3es3NlDYYHuCe/W9Mwj1b/xBUdX1gxr/ahzIK0r:LoCOLCua/DVHt9//xB4KxrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88050ca829f319771732994cc61e8395_JaffaCakes118

Files

88050ca829f319771732994cc61e8395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9499bc88c22eb5fc349a6a795f0ab3c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

ole32

CoCreateInstance
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoInitializeSecurity

setupapi

CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

SetPriorityClass
GlobalAddAtomW
ResumeThread
CreateFileW
LoadLibraryExW
GetModuleHandleA
DeleteFileW
FindFirstFileW
FindClose
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetProcAddress
OpenThread
CreateDirectoryW
ReleaseMutex
GetFileAttributesW
LoadResource
SetThreadPriority
EnumResourceLanguagesA
FindNextFileW
GetCommandLineW
GetStartupInfoW
GetExitCodeThread
LoadModule
GetSystemTimeAsFileTime
GetDriveTypeW
ExitProcess
DeviceIoControl
QueryPerformanceCounter
OutputDebugStringW
CopyFileW
GetCurrentProcessId
FindResourceW

advapi32

ControlService
DeregisterEventSource
DeleteService
RegEnumKeyExW
CloseServiceHandle
RegisterEventSourceW
OpenServiceW
ReportEventW
SetServiceStatus
OpenSCManagerW
OpenThreadToken
OpenProcessToken
CreateServiceW

Sections

.text
Size: 91KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9499bc88c22eb5fc349a6a795f0ab3c7

Headers

File Characteristics

Imports

ole32

setupapi

kernel32

advapi32

Sections

.text Size: 91KB - Virtual size: 234KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 89KB - Virtual size: 89KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 91KB - Virtual size: 234KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 89KB - Virtual size: 89KB

.rsrc
Size: 512B - Virtual size: 4KB