94d04fc46815fbd533123c4ec2fdf8c4_JaffaCakes118

General

Target

94d04fc46815fbd533123c4ec2fdf8c4_JaffaCakes118
Size

171KB
MD5

94d04fc46815fbd533123c4ec2fdf8c4
SHA1

522d12610c725b3251fe7fc518b32c96c8cfec11
SHA256

63304ec66378d7e1eb957fc1a5c792c387f82a492ce3cc4c19f9adf879b38dce
SHA512

e2ec5a0d45ab930c7d54711d01f89302dea449c48088e75f1a823ed88d67fdaee2047be5bcd2d50cb7db0567952fc973ba035507f2d2eb91e4593887d3236a71
SSDEEP

3072:L3PV89VYqVYHS9BtFa6JX0/4S/55N4B0n6/6dPo2cyY+BArlzTqDV:xCoyTvXyFR5N4e66dPor+BAR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d04fc46815fbd533123c4ec2fdf8c4_JaffaCakes118

Files

94d04fc46815fbd533123c4ec2fdf8c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a07adbab81ff5cb483bd70ca36c644c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
_initterm
__p__commode
_acmdln
__set_app_type
_amsg_exit
_ismbblead
__p__fmode
exit
_exit
?terminate@@YAXXZ
_cexit
__getmainargs
memset
_vsnprintf
__setusermatherr
_XcptFilter
_controlfp

kernel32

GetCurrentProcess
GlobalMemoryStatus
SetUnhandledExceptionFilter
AddAtomW
TlsFree
GetComputerNameA
GetModuleFileNameA
CloseHandle
SetLastError
TlsAlloc
HeapFree
GetStartupInfoA
GetCurrentProcessId
QueryPerformanceCounter
SetHandleCount
GetSystemTimeAsFileTime
DeviceIoControl
GetCurrentThread
TlsSetValue
HeapAlloc
GetTickCount
GetModuleHandleW
EnumResourceNamesA
GetDiskFreeSpaceA
RtlUnwind
TerminateProcess
GetVersion
GetStdHandle
OutputDebugStringW
RaiseException
GetLocalTime
TlsGetValue
GetProcessHeap
GetVersionExA
GetCommandLineA
GetFileType
InterlockedExchange

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a07adbab81ff5cb483bd70ca36c644c2

Headers

File Characteristics

Imports

msvcrt

kernel32

setupapi

Sections

.text Size: 89KB - Virtual size: 89KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 78KB - Virtual size: 77KB

.reloc Size: 1024B - Virtual size: 128KB

.text
Size: 89KB - Virtual size: 89KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 78KB - Virtual size: 77KB

.reloc
Size: 1024B - Virtual size: 128KB