07ebcaa484a5cb97441015d512fba947_JaffaCakes118

General

Target

07ebcaa484a5cb97441015d512fba947_JaffaCakes118
Size

282KB
MD5

07ebcaa484a5cb97441015d512fba947
SHA1

203f9a7d5d7902761c5aa94837b34baf580be150
SHA256

17741a6c6789a487d79535d023f570d7ef33049902a0e1905a348532d0c0ac70
SHA512

64fa07688c17e9bb17f62ceb03f3e80b70f5908a5dc2b11a1e738b751a8386ba886c44a53fdb39346c6e88646f4d3e50898443906fc983a938e07de4fcb6f041
SSDEEP

6144:Ozt9m3a9UrUPUYuvCP9RW7/G3/omTk5VuM3jcOFhBtEvQlm:Mt7pXumH3QmQlDEolm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07ebcaa484a5cb97441015d512fba947_JaffaCakes118

Files

07ebcaa484a5cb97441015d512fba947_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08e8b32196cdb9cbb2629eadf55137a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

iphlpapi

GetIpAddrTable

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

user32

IsWindow
SendMessageA
DestroyWindow
CreateWindowExW
EnumChildWindows
GetDlgItem
GetWindowThreadProcessId

kernel32

AddAtomA
GetCPInfo
VirtualFree
TlsSetValue
GetACP
TerminateProcess
IsBadWritePtr
GetStdHandle
VirtualQuery
GetCurrentProcessId
GetModuleFileNameA
GetOEMCP
GetStartupInfoA
TlsGetValue
GetLocaleInfoA
FreeEnvironmentStringsW
VirtualAlloc
TlsFree
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
GetVersionExA
EnumResourceLanguagesA
lstrcpyW
GetCurrentProcess
FreeEnvironmentStringsA
InterlockedExchange
GetSystemInfo
WriteFile
GetEnvironmentStrings
SetLastError
SetEndOfFile
QueryPerformanceCounter
HeapCreate
GetSystemTimeAsFileTime
GetFileType
HeapSize
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 142KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08e8b32196cdb9cbb2629eadf55137a2

Headers

File Characteristics

Imports

newdev

iphlpapi

mprapi

user32

kernel32

shell32

setupapi

Sections

.text Size: 142KB - Virtual size: 274KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 136KB - Virtual size: 136KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 274KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 136KB - Virtual size: 136KB

.rsrc
Size: 512B - Virtual size: 4KB