1c7a10732ecbd4a30b02a4d12a99d5eb_JaffaCakes118 | Triage

Sharing

General

Target

1c7a10732ecbd4a30b02a4d12a99d5eb_JaffaCakes118
Size

1.9MB
MD5

1c7a10732ecbd4a30b02a4d12a99d5eb
SHA1

b7a25bea4b163b499b5b23a52d69fbe9fee87e9b
SHA256

59a900db4016c7cab2b8235554fb9d703577dfacbc37e136a9b8277b12407dfd
SHA512

150753aef099c16a15434731731465bc76fe95f217739428c3ea103feccc2f0e9be88c36454156c97d1c7bedb2cec32663c2addbb7c615ef1459f17b76d83fc2
SSDEEP

24576:lj9ZDtTS7od7341D2+jjqBicDSdwAO3BECoRWz5smhqzxGkdNrAQDEyYECMrU1y:ljdh73WD2IcicDsZO3BjwG5h+dJfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c7a10732ecbd4a30b02a4d12a99d5eb_JaffaCakes118

Files

1c7a10732ecbd4a30b02a4d12a99d5eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7685fe5812075fbcd366d8b2e3d64af8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

AddAtomA
UnhandledExceptionFilter
GetOEMCP
FreeEnvironmentStringsA
WriteFile
GetEnvironmentStringsW
EnumResourceLanguagesW
GetEnvironmentStrings
GetPrivateProfileStructW
GetCPInfo
GetStartupInfoA
FreeEnvironmentStringsW
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

StrCmpNIA
StrStrA

iphlpapi

GetIpAddrTable

Sections

.text
Size: 903KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1021KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ