00286109032cd586708ec432843400dc_JaffaCakes118

General

Target

00286109032cd586708ec432843400dc_JaffaCakes118
Size

183KB
MD5

00286109032cd586708ec432843400dc
SHA1

0592aff67cd3b375e9e3243065011a7c397631f3
SHA256

f4ededc38adbc0b37fff10af7979754bbc326ffb4a62c63eb86e0eddceaf6b1f
SHA512

2fcdab9eb7509e30400720b048146e49e2b8a7e1ee9e8f1358410dd1440ce8c61ca680f44bebe7f32a75e7eb433991402646a38873fd276f40f57fa2605430c2
SSDEEP

3072:saPbvqP4o2mLxjPsa7uoFGBbQ3VUJkG6R3EuRXiV+E4e8yLTw1o8TIz8T:7Pbvqf7LpPsa7uWGO3I6TMHioYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00286109032cd586708ec432843400dc_JaffaCakes118

Files

00286109032cd586708ec432843400dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8055f628150c12b6be584cc92598de77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

kernel32

GetFileAttributesW
CreateFileMappingA
CreateDirectoryW
WaitForSingleObject
AddAtomW
MoveFileExW
GetVersionExW
FileTimeToSystemTime
CloseHandle
GetCommandLineA
ResetEvent
SetEvent
CreateEventA
UnmapViewOfFile
GetTempPathW
LocalAlloc
GetExitCodeProcess
GetSystemTime
EnumResourceNamesA
WriteConsoleW
CreateWaitableTimerA
CreateThread
GetCurrentThreadId
CopyFileW
DeleteFileW
WriteFileGather
FileTimeToLocalFileTime
MapViewOfFile
SetFileAttributesW
CreateProcessW
GetModuleHandleW
LoadLibraryExW
CreateFileW
GetEnvironmentVariableW
LocalFree
GetSystemDirectoryW
CreateFileA

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 93KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8055f628150c12b6be584cc92598de77

Headers

File Characteristics

Imports

advapi32

lz32

kernel32

setupapi

Sections

.text Size: 93KB - Virtual size: 237KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 87KB - Virtual size: 86KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 237KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 87KB - Virtual size: 86KB

.rsrc
Size: 512B - Virtual size: 4KB