JaffaCakes118_7ab5c7d03341e191b6e3bedad1cd9083

General

Target

JaffaCakes118_7ab5c7d03341e191b6e3bedad1cd9083
Size

185KB
MD5

7ab5c7d03341e191b6e3bedad1cd9083
SHA1

e20ef03123d56e2b9f3a2e242a1433c024a495de
SHA256

7067387ab1858bd5f412ca66ac3f6a6d1ff0b26639b276479dd2d255484db4a6
SHA512

ad22b0d1c57693cb1c4ba2661d82de670c17df09b75a63add7f538aa513f967b355e79769f309850043891168a707d6a8c238884d2e9b1907f4916fa083e6621
SSDEEP

3072:ulDOnvgim3zDYBynZGyxdHXUm/mF67ODWgG97Oker6L0INKKa2oPpaNi/nx1op:qb3PznsYXUmuI7rhZ4Gq2gcNanIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7ab5c7d03341e191b6e3bedad1cd9083

Files

JaffaCakes118_7ab5c7d03341e191b6e3bedad1cd9083
.exe windows:4 windows x86 arch:x86

fd295208dccea6b7bce693db5fc78343

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetThreadLocale
LCMapStringW
lstrcpyA
CloseHandle
IsBadCodePtr
AddAtomA
FreeEnvironmentStringsW
GetEnvironmentStringsW
MulDiv
FreeLibrary
MultiByteToWideChar
lstrcpynA
GetCPInfo
lstrlenA
LeaveCriticalSection
SetStdHandle
GetModuleHandleA
lstrcmpiA
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetStartupInfoA
GetStringTypeW
ReadFile
LCMapStringA
EnumResourceNamesW
EnterCriticalSection
FindFirstFileA
GetLastError
GetTickCount
CreateFileA
lstrcatA
LoadLibraryA
Sleep
SetFilePointer
SetDllDirectoryW
FlushFileBuffers
VirtualProtect
GetProcAddress
GetStringTypeA
WriteFile
UnhandledExceptionFilter
lstrcmpA
FreeEnvironmentStringsA
WideCharToMultiByte
InitializeCriticalSection
GetFileAttributesA
GetDiskFreeSpaceA
GetCurrentThreadId
DeleteCriticalSection
GetFullPathNameA
GetEnvironmentStrings
RaiseException

Sections

.text
Size: 99KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd295208dccea6b7bce693db5fc78343

Headers

File Characteristics

Imports

setupapi

kernel32

Sections

.text Size: 99KB - Virtual size: 246KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 83KB - Virtual size: 82KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 99KB - Virtual size: 246KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 83KB - Virtual size: 82KB

.rsrc
Size: 512B - Virtual size: 4KB