0f0d0a9cf275110aa09a9895b2de1186_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f0d0a9cf275110aa09a9895b2de1186_JaffaCakes118
Size

279KB
MD5

0f0d0a9cf275110aa09a9895b2de1186
SHA1

0a1325d34f0ad69b280e48fb57bf480b2538815b
SHA256

441188a1cea5e451482c898116ecbb3896955513686692212f12a140384d1948
SHA512

9e859a521a0e5aee9fd7f5e6bcd332b3ffcd5460e7c8272d9500d984c5959d0384074e8d47ecbe2e5cca2f97620f6c960c9f322d2ede979ef292b4f56e25aa82
SSDEEP

6144:J7n1+l65RAHqjeEnozHOEKS64yoRHfmTj8UiUDTQv:J7lRGgdozHLDLRH+NXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f0d0a9cf275110aa09a9895b2de1186_JaffaCakes118

Files

0f0d0a9cf275110aa09a9895b2de1186_JaffaCakes118
.exe windows:4 windows x86 arch:x86

024c7ffedda7847622829546224ab03b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

kernel32

UnhandledExceptionFilter
AddAtomA
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
EnumResourceLanguagesA
WriteFile
GetNumberFormatW
GetStartupInfoA
GetEnvironmentStringsW
GetCPInfo
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

EnumChildWindows
GetDlgItem
DestroyWindow
CreateWindowExW
SendMessageA
IsWindow
GetWindowThreadProcessId

Sections

.text
Size: 142KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ