55355d881adb92b9d40ab221b20ab0d1_JaffaCakes118

General

Target

55355d881adb92b9d40ab221b20ab0d1_JaffaCakes118
Size

152KB
MD5

55355d881adb92b9d40ab221b20ab0d1
SHA1

e8042f22cb25f6455319962c9d16f0a1d1e7820a
SHA256

62891cbb16b15af3fca13195553d66c8bb3560bd04be6197917dfda1f9336f6f
SHA512

844067a2fcf035dd7f7dbd03cbacc6bd20fee580ecfe5ba79fa62cba087c30df5d3209b0c4e94243a434b6a444277883922df8d1dfea261107568f235adabc02
SSDEEP

3072:UzCJZR39joSPn7SeUOG+wfB1JFGEjYLcPbLW54z0raW92xoQRKYbe:MCvJSq7COG+85s5CbLWTrRIn4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55355d881adb92b9d40ab221b20ab0d1_JaffaCakes118

Files

55355d881adb92b9d40ab221b20ab0d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0312e1ce0c3a4f5543ad0aa50567804a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCPInfo
GetModuleHandleA
GetStringTypeW
HeapFree
GetConsoleOutputCP
FreeLibrary
InterlockedIncrement
AddAtomA
SetUnhandledExceptionFilter
LoadLibraryW
HeapSize
GetACP
UnhandledExceptionFilter
GetFileAttributesW
GetCurrentProcess
GetSystemTimeAsFileTime
GetConsoleCP
WideCharToMultiByte
GetVersionExA
IsValidCodePage
HeapReAlloc
GetStartupInfoA
EnumResourceNamesW
BeginUpdateResourceW
UpdateResourceW
VirtualAlloc
LCMapStringW
SetFilePointer
GetProcessHeap
GetConsoleMode
LeaveCriticalSection
GetCommandLineA
HeapAlloc
GetCurrentProcessId
EnterCriticalSection
CheckNameLegalDOS8Dot3W
LCMapStringA
RtlUnwind
RaiseException
GetStringTypeA
WriteFile
GetModuleFileNameW
GetOEMCP
SetStdHandle
IsDebuggerPresent
LoadLibraryExW
InterlockedDecrement

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoInitialize

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 146KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0312e1ce0c3a4f5543ad0aa50567804a

Headers

File Characteristics

Imports

kernel32

shell32

ole32

setupapi

Sections

.text Size: 146KB - Virtual size: 278KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 128KB - Virtual size: 128KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 278KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 128KB - Virtual size: 128KB

.rsrc
Size: 512B - Virtual size: 4KB