87b3f43f7d777c1ecd9f61b4ea47e62f_JaffaCakes118

General

Target

87b3f43f7d777c1ecd9f61b4ea47e62f_JaffaCakes118
Size

184KB
MD5

87b3f43f7d777c1ecd9f61b4ea47e62f
SHA1

03f9d4bb5b32e6524397d026935b83237677938d
SHA256

1e1fbec4007797233c9237c333a31bdfb9b60963d9d946cd60ef4318dfd75b18
SHA512

75648cad0a3e321430a3f6da08042026a14a21602653a3b171c83171b51e8e4ec9ff40a9a8d60795c18875068c70ac3b6b3a8743dd2b42a6a36c2b2f44f70d4a
SSDEEP

3072:aJQK/z3HPo1oIq7Pb6SA0Qpveqct0wisYAko2Kj8M6kSPkS8Wf6:aGK/D8w/GvO0lyko9j8/PkS8WC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87b3f43f7d777c1ecd9f61b4ea47e62f_JaffaCakes118

Files

87b3f43f7d777c1ecd9f61b4ea47e62f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9ab1f14643c4b53936867d9e905b8c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetModuleFileNameW
ReleaseMutex
CreateMutexA
VirtualAlloc
GetVersionExA
GetCurrentProcessId
AddAtomW
GetTickCount
WaitForSingleObject
GetVolumeInformationA
CopyFileA
CreateDirectoryA
GetCurrentThreadId
GetSystemTime
GetTempPathA
CreateFileA
GlobalLock
InterlockedIncrement
DeleteFileA
Sleep
GlobalFree
GetTempFileNameA
DeviceIoControl
MultiByteToWideChar
SetFileAttributesA
QueryPerformanceCounter
CreateFileW
LocalFree
EnumResourceNamesA
LocalAlloc
CloseHandle
InterlockedDecrement
DeleteCriticalSection
DisableThreadLibraryCalls
SetFilePointer
CheckNameLegalDOS8Dot3W
GetSystemTimeAsFileTime
WideCharToMultiByte
GetFileSize
ReadFile
GlobalUnlock
lstrlenA
GetFileAttributesA
VirtualFree
GetModuleFileNameA
InitializeCriticalSection
GetLastError
FreeLibrary

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

Sections

.text
Size: 97KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9ab1f14643c4b53936867d9e905b8c6

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

lz32

Sections

.text Size: 97KB - Virtual size: 237KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 83KB - Virtual size: 82KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 97KB - Virtual size: 237KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 83KB - Virtual size: 82KB

.rsrc
Size: 512B - Virtual size: 4KB