ff08b2c34ab0cf6eeb1bef80a0c6e221_JaffaCakes118

General

Target

ff08b2c34ab0cf6eeb1bef80a0c6e221_JaffaCakes118
Size

169KB
MD5

ff08b2c34ab0cf6eeb1bef80a0c6e221
SHA1

e8db988c29c21c95b1349a6c190b68f47d538880
SHA256

82c54937adc3b60765b144b214722d93b83acd633a0153144f9d707de92d0f3d
SHA512

33663f76e9a4906befced476b927a455932f2522e55bf4f3bd6c699aec02760ce5a5dd2ab5c969f35f033c33b6c6d57f2d83837eb2a1fe2cdbd6bf3169ff3e8f
SSDEEP

3072:1CRW7ZIeTosT7XVrQUB+HYKd+zNTUrxyDyjM+ICo9Zk46FZTBdWU:1CQoSXVrQUB3K0NuxIyjM+XYqbVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff08b2c34ab0cf6eeb1bef80a0c6e221_JaffaCakes118

Files

ff08b2c34ab0cf6eeb1bef80a0c6e221_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4483503f2bb90be5f286d768562277a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

FileTimeToSystemTime
LocalAlloc
DeleteFileW
GetExitCodeProcess
ResetEvent
AddAtomW
MoveFileExW
CreateWaitableTimerA
GetSystemTime
GetModuleHandleW
MapViewOfFile
UnmapViewOfFile
GetSystemDirectoryW
GetVersionExW
CreateEventA
GetCurrentThreadId
LocalFree
EnumResourceNamesA
CreateThread
CloseHandle
CreateDirectoryW
CreateFileMappingA
CreateProcessW
GetFileAttributesW
CreateFileW
GetEnvironmentVariableW
WriteConsoleW
ReadFileScatter
LoadLibraryExW
SetFileAttributesW
GetTempPathW
WaitForSingleObject
SetEvent
CopyFileW
GetCommandLineA
FileTimeToLocalFileTime
CreateFileA

advapi32

RegQueryValueA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

Sections

.text
Size: 90KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4483503f2bb90be5f286d768562277a0

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

lz32

Sections

.text Size: 90KB - Virtual size: 490KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 90KB - Virtual size: 490KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB