f58e40fbe5c4d53dccf010d782aa45de_JaffaCakes118

General

Target

f58e40fbe5c4d53dccf010d782aa45de_JaffaCakes118
Size

172KB
MD5

f58e40fbe5c4d53dccf010d782aa45de
SHA1

5aa1bebfcb3fcc6ab5d4673d92168eb29896614e
SHA256

92f01695a56cb7569a58bf9a209c76bf7a70fbde25b2761ef655c31e3ea1a1c6
SHA512

96e89517470ac1a3d3c8537a707a4da178d5485e734628d1bf93f10ac3e6278b228b588fbab0cbb682155f4672069a0a0bfb70218baac061f6331d936a4f195b
SSDEEP

3072:K3n0/ZqFUdTM+gu3rE5huyrcActI9zJCpSP27NID4e+qro6fUUG8kVa91XNDGIR:K3SAUV13IbugcAX8Ndqro681BVa91DR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f58e40fbe5c4d53dccf010d782aa45de_JaffaCakes118

Files

f58e40fbe5c4d53dccf010d782aa45de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c49ae3c70b0d7ca6cd62e6a0e931f074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
AddAtomW
GetLocaleInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
TlsSetValue
IsBadReadPtr
SetFilePointer
GetACP
SetUnhandledExceptionFilter
HeapSize
VirtualProtect
GetCurrentProcess
GetThreadLocale
GetStringTypeW
GetStringTypeA
GetFullPathNameA
FlushFileBuffers
LCMapStringW
GetStartupInfoA
ReadFile
GetFileType
UnhandledExceptionFilter
EnumResourceNamesA
GetModuleFileNameA
IsBadCodePtr
GetOEMCP
LCMapStringA
GetStdHandle
TlsGetValue
FindFirstFileA
CreateFileA
WriteFileGather
WriteFile
GetVersionExA
SetStdHandle
WideCharToMultiByte
TerminateProcess
GetEnvironmentStringsW
SetHandleCount
FreeEnvironmentStringsW
GetCPInfo
GetDiskFreeSpaceA

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

lz32

LZClose
LZCopy
LZOpenFileA

advapi32

RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 87KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c49ae3c70b0d7ca6cd62e6a0e931f074

Headers

File Characteristics

Imports

kernel32

setupapi

lz32

advapi32

Sections

.text Size: 87KB - Virtual size: 231KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 81KB - Virtual size: 80KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 87KB - Virtual size: 231KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 81KB - Virtual size: 80KB

.rsrc
Size: 512B - Virtual size: 4KB