JaffaCakes118_66de43bccdb8b1863100cbec8061cf0e

General

Target

JaffaCakes118_66de43bccdb8b1863100cbec8061cf0e
Size

278KB
MD5

66de43bccdb8b1863100cbec8061cf0e
SHA1

9671cecd9b594174180c7559a0331e390d98e539
SHA256

2b10bfaf98afc88abe29fa81ccf9e8667f1ed5bc720a2fcec624338f34088137
SHA512

81e629f62282610bd20ea6beeba697fe344baccdb929ffd4c5d9a4d7494d66382108e9734b05a1f354e50eb9b5870fe9984f2f1beee83c462ea5cd3a005e2f9f
SSDEEP

6144:a6n1A1JMDfrg98sOnwGqHrEFQz7/4cCBSxF1XD:HnoMbEesZHAif+sxF1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_66de43bccdb8b1863100cbec8061cf0e

Files

JaffaCakes118_66de43bccdb8b1863100cbec8061cf0e
.exe windows:4 windows x86 arch:x86

c3d43b4fb6fbb520e4cadef982213886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

SHGetFolderPathW

gdi32

DeleteObject

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

advapi32

ReportEventW
DeleteService
OpenServiceW
OpenThreadToken
OpenProcessToken
RegisterEventSourceW
RegEnumKeyExW
SetServiceStatus
CloseServiceHandle
DeregisterEventSource
OpenSCManagerW
ControlService
CreateServiceW

kernel32

FindNextFileW
FindAtomA
GetProcAddress
FindClose
GetSystemTimeAsFileTime
GetDriveTypeW
FindFirstFileW
LoadLibraryExW
OpenThread
GetExitCodeThread
GetCurrentProcessId
LeaveCriticalSection
GetCommandLineW
GetTickCount
ExitProcess
CreateFileW
DeleteFileW
QueryPerformanceCounter
EnumResourceLanguagesA
OutputDebugStringW
LoadModule
LoadResource
SetPriorityClass
ResumeThread
CreateDirectoryW
EnterCriticalSection
GetFileAttributesW
CopyFileW
ReleaseMutex
DeviceIoControl
SetThreadPriority
GetModuleHandleA
GetStartupInfoW
FindResourceW

Sections

.text
Size: 134KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3d43b4fb6fbb520e4cadef982213886

Headers

File Characteristics

Imports

shell32

gdi32

setupapi

advapi32

kernel32

Sections

.text Size: 134KB - Virtual size: 269KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 141KB - Virtual size: 140KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 134KB - Virtual size: 269KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 141KB - Virtual size: 140KB

.rsrc
Size: 512B - Virtual size: 4KB