22f180f8918cf54c10b5151a6c168157_JaffaCakes118

General

Target

22f180f8918cf54c10b5151a6c168157_JaffaCakes118
Size

285KB
MD5

22f180f8918cf54c10b5151a6c168157
SHA1

55629aa291acbc6ca5904cf81f91efc9ba5cd9a6
SHA256

3ac3141b52fd4daa98a694aaa6cc95dc2f00ee36470b17d35d3e04b0bf6ec7de
SHA512

516ec620dc678e57155929cf4f3dc93fdac897100cc4ca20d642af28c3d4f16d781c7731912089beba0f664c102f373a77273b6b8edb472ef614b8f35ceeb310
SSDEEP

6144:ySj89k1C+p22wtN+zLrGqBihXTaKDCFO01hQU/ko:fj8+OT+vSGitTaKDsxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f180f8918cf54c10b5151a6c168157_JaffaCakes118

Files

22f180f8918cf54c10b5151a6c168157_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae438ab08519c405cbf008b140e56041

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

CreateWindowExW
EnumChildWindows
DestroyWindow
SendMessageA
GetDlgItem
IsWindow
GetWindowThreadProcessId

kernel32

UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
VirtualAlloc
GetOEMCP
FreeEnvironmentStringsA
AddAtomA
GetEnvironmentStrings
VirtualFree
TlsFree
GetVersionExA
VirtualQuery
GetModuleFileNameA
SetEndOfFile
TlsGetValue
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCPInfo
EnumResourceLanguagesA
GetEnvironmentStringsW
HeapSize
GetACP
QueryPerformanceCounter
SetHandleCount
HeapCreate
TlsAlloc
WriteFile
InterlockedExchange
FormatMessageW
GetCurrentProcessId
SetLastError
TlsSetValue
GetSystemInfo
GetStdHandle
GetFileType
GetLocaleInfoA
GetCurrentProcess
HeapDestroy
IsBadWritePtr
SetUnhandledExceptionFilter

Sections

.text
Size: 152KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae438ab08519c405cbf008b140e56041

Headers

File Characteristics

Imports

iphlpapi

mprapi

shell32

newdev

setupapi

user32

kernel32

Sections

.text Size: 152KB - Virtual size: 280KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 129KB - Virtual size: 129KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 152KB - Virtual size: 280KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 129KB - Virtual size: 129KB

.rsrc
Size: 512B - Virtual size: 4KB