b3916b91ae9f1d34645357e7dad10dfd_JaffaCakes118

General

Target

b3916b91ae9f1d34645357e7dad10dfd_JaffaCakes118
Size

185KB
MD5

b3916b91ae9f1d34645357e7dad10dfd
SHA1

b0c0474e9e67b3193de0b24f90e343a4c7e5b0be
SHA256

0e816668fa16306fdbce90d81c07022f24f9331eb999a97ec933c1a4473fcf07
SHA512

471ba5e89ba72977287de40549d439697703422f2a29ea3a15d7bf9075b6168af53b886fb3c0c708b62fc5be2c3e4e19e88cde96cab48e2a02918dcb1fef5a5d
SSDEEP

3072:GuXMeK5uXru034+kJYWBR3gEO6hfXe4b7notJLips4q6JJaBvFHzPeHou3SNGHB:GuBK5uXru0aYWP3guhveptJB4q6r+1Da

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3916b91ae9f1d34645357e7dad10dfd_JaffaCakes118

Files

b3916b91ae9f1d34645357e7dad10dfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77a246bf6714bde0ada1c646cdd9d495

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

setupapi

CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

SetStdHandle
AddAtomA
UnhandledExceptionFilter
WriteFile
ReadFile
DeleteCriticalSection
LoadLibraryA
CreateFileA
lstrcatA
VirtualProtect
GetOEMCP
WideCharToMultiByte
GetCPInfo
GetTickCount
lstrcpyA
LCMapStringW
lstrcmpiA
FlushFileBuffers
lstrlenA
GetEnvironmentStringsW
LCMapStringA
IsBadReadPtr
GetProcAddress
EnumResourceNamesW
LeaveCriticalSection
GetEnvironmentStrings
GetCurrentThreadId
GetModuleHandleA
MulDiv
GetStringTypeW
MultiByteToWideChar
InitializeCriticalSection
FreeLibrary
GetStringTypeA
GetDiskFreeSpaceA
GetFullPathNameA
lstrlenW
FindFirstFileA
SetUnhandledExceptionFilter
GetThreadLocale
Sleep
SetFilePointer
GetStartupInfoA
lstrcpynA
GetLastError
EnterCriticalSection
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileAttributesA
lstrcmpA
IsBadCodePtr
CloseHandle
RaiseException

Sections

.text
Size: 99KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77a246bf6714bde0ada1c646cdd9d495

Headers

File Characteristics

Imports

setupapi

kernel32

Sections

.text Size: 99KB - Virtual size: 246KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 83KB - Virtual size: 82KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 99KB - Virtual size: 246KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 83KB - Virtual size: 82KB

.rsrc
Size: 512B - Virtual size: 4KB