9353e6c6dc1502faf3666f695e703198_JaffaCakes118

General

Target

9353e6c6dc1502faf3666f695e703198_JaffaCakes118
Size

169KB
MD5

9353e6c6dc1502faf3666f695e703198
SHA1

edb3f50c1a8039a5c2424b42cdf1dc5197c18e32
SHA256

7e2f51519b393215f2e573e1e2fa9dadf37967a2193b2490012dbdc37bf5f52e
SHA512

895aee099139ddc5c9133129ba3e067839062ca5537508038e923b6aa54fd534b92ae6c1eea7a14724a7ae99dc03d5b484e919c127d096d0349e337e72aee539
SSDEEP

3072:CvV4TXwc73E+0Y8gal6HFbZPVbu9gU3HCc6gmT2NQQa+uSX+vG3kWP:CvyTXwcLEXYoyNm3ia1U87P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9353e6c6dc1502faf3666f695e703198_JaffaCakes118

Files

9353e6c6dc1502faf3666f695e703198_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41f99440c4e8e7df75ac2ef1dfc9ddf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

SetStdHandle
GetEnvironmentStrings
lstrcpynA
GetStringTypeW
AddAtomA
CreateFileA
GetCurrentThreadId
DeleteCriticalSection
IsBadCodePtr
GetFileAttributesA
GetOEMCP
GetThreadLocale
lstrcmpiA
GetLastError
lstrcmpA
UnhandledExceptionFilter
IsBadReadPtr
LeaveCriticalSection
FreeEnvironmentStringsA
MultiByteToWideChar
MulDiv
WideCharToMultiByte
LCMapStringA
GetModuleHandleA
GetDiskFreeSpaceA
EnumResourceNamesW
GetProcAddress
FindFirstFileA
lstrcatA
GetStringTypeA
ReadFile
GetTickCount
SetDllDirectoryW
GetStartupInfoA
WriteFile
GetFullPathNameA
LCMapStringW
LoadLibraryA
VirtualProtect
Sleep
CloseHandle
lstrlenA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
FlushFileBuffers
FreeLibrary
InitializeCriticalSection
lstrcpyA
FreeEnvironmentStringsW
SetFilePointer
GetCPInfo
EnterCriticalSection
RaiseException

Sections

.text
Size: 87KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41f99440c4e8e7df75ac2ef1dfc9ddf4

Headers

File Characteristics

Imports

setupapi

kernel32

Sections

.text Size: 87KB - Virtual size: 487KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 78KB - Virtual size: 77KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 87KB - Virtual size: 487KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 78KB - Virtual size: 77KB

.rsrc
Size: 512B - Virtual size: 4KB