265c05e096258093e02b69521b7a484d_JaffaCakes118

General

Target

265c05e096258093e02b69521b7a484d_JaffaCakes118
Size

169KB
MD5

265c05e096258093e02b69521b7a484d
SHA1

4c741c8c802d863778fc097593e2098c0edb89b5
SHA256

6c3651c6e2a694d5b7e717c9c2fddb04a39f1c2cf78fe4419bf1a9058c80db85
SHA512

ef0289360fe12bb6bc570b699aee4640236333b7aa7e68b9d8f51aecc3b60d71fa57a6918fdc90dfae1f13bebd8627e348bb3082aed812cb453b9ba05951f799
SSDEEP

3072:IK+5h1sbgSwaIAzEwXU6rOL9S582Ymd8JZ/89VQCcCZinF0O/T0VbqJI:hYm9ywEIE9wsX/cXZZoTgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
265c05e096258093e02b69521b7a484d_JaffaCakes118

Files

265c05e096258093e02b69521b7a484d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f1dd3871cde0ade05d9ae9134d3063d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

kernel32

GetTempFileNameA
DeviceIoControl
Sleep
GetTickCount
CopyFileA
GetCurrentProcessId
AddAtomW
DisableThreadLibraryCalls
WaitForSingleObject
CreateFileA
GetSystemTimeAsFileTime
GlobalUnlock
QueryPerformanceCounter
SetFilePointer
GetFileSize
GlobalFree
InterlockedIncrement
GetLastError
MultiByteToWideChar
SetFileAttributesA
EnumResourceNamesA
VirtualAlloc
CreateMutexA
GetVolumeInformationA
GetModuleFileNameA
CloseHandle
ReleaseMutex
LocalAlloc
GetSystemTime
WideCharToMultiByte
CreateFileW
DeleteFileA
WriteFileGather
DeleteCriticalSection
CreateDirectoryA
GetModuleFileNameW
LocalFree
VirtualFree
ReadFile
InterlockedDecrement
GlobalLock
GetFileAttributesA
GetTempPathA
GetVersionExA
InitializeCriticalSection
GetCurrentThreadId
lstrlenA
FreeLibrary

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 92KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f1dd3871cde0ade05d9ae9134d3063d

Headers

File Characteristics

Imports

advapi32

lz32

kernel32

setupapi

Sections

.text Size: 92KB - Virtual size: 484KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 73KB - Virtual size: 72KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 484KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 512B - Virtual size: 4KB