2b90765e0f0627fc57b3c043cfdf614f_JaffaCakes118

General

Target

2b90765e0f0627fc57b3c043cfdf614f_JaffaCakes118
Size

185KB
MD5

2b90765e0f0627fc57b3c043cfdf614f
SHA1

9ee62a12cb695897619eb12c62784ba12bd441f5
SHA256

631438f38435e83205dea77ed480a1f6938a31c4678a2c798ccea47bf13d36e5
SHA512

ce10557be0bbaa998c04618bc5027ccd05a096d96a18fdbb91d300f12c12edf8b8f5f2ab77ab2e60716272946216e1f6bdea91b7ff54da3dd1d9a231020c423a
SSDEEP

3072:LWMaXtJDgkKuHfpefTuR+zmRpAqa3DoiWzqQZO2pJEOeleBMUIIT:LWM+lgk/BefU+zmsqazSfRvele4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b90765e0f0627fc57b3c043cfdf614f_JaffaCakes118

Files

2b90765e0f0627fc57b3c043cfdf614f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eda053fae0b5f85f90305b59b0709811

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

TlsAlloc
TerminateProcess
FreeEnvironmentStringsA
SetLastError
GetSystemInfo
HeapDestroy
AddAtomA
InterlockedExchange
IsBadWritePtr
VirtualFree
GetVersionExA
VirtualAlloc
GetCPInfo
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsSetValue
TlsFree
GetLocaleInfoA
EnumResourceLanguagesA
GetCurrentProcessId
FreeEnvironmentStringsW
SetEndOfFile
VirtualQuery
GetFileType
GetEnvironmentStringsW
GetOEMCP
lstrcpyW
TlsGetValue
GetStartupInfoA
HeapCreate
HeapSize
UnhandledExceptionFilter
GetStdHandle
WriteFile
GetCurrentProcess
GetEnvironmentStrings
SetHandleCount
GetACP
SetUnhandledExceptionFilter

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shell32

SHGetFolderPathW

user32

GetDlgItem
SendMessageA
DestroyWindow
CreateWindowExW
IsWindow
EnumChildWindows
GetWindowThreadProcessId

Sections

.text
Size: 93KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eda053fae0b5f85f90305b59b0709811

Headers

File Characteristics

Imports

iphlpapi

newdev

kernel32

mprapi

setupapi

shell32

user32

Sections

.text Size: 93KB - Virtual size: 237KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 88KB - Virtual size: 87KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 237KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 88KB - Virtual size: 87KB

.rsrc
Size: 512B - Virtual size: 4KB