3449a365d29775eeb472661d2b0186de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3449a365d29775eeb472661d2b0186de_JaffaCakes118
Size

184KB
MD5

3449a365d29775eeb472661d2b0186de
SHA1

3aa07d3e2ce8f7984a76bf21366d30afdb8a8ca5
SHA256

e222b14fc1e007da6108479a3d8b022fe06cda03e6c0b360c71286fa650b596c
SHA512

da1e5a6ef3abf1c5d4d3dc854b69a2222a2949803bb86a41f776a002da2033369e3f3f99380362a80c227d27571353a547773b1dbd30457e02e1896b272534fd
SSDEEP

3072:u9Nw2Ot9F04jX8iPo4hpV6/xjuQLH8E8wRlelqlnnf9HGzIcPYB6Spss:cw2E64LZPvQ0wR/R9HKIcPYPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3449a365d29775eeb472661d2b0186de_JaffaCakes118

Files

3449a365d29775eeb472661d2b0186de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b7f0c23a526a0aff4a831ad64fdf66a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
AddAtomA
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
GetOEMCP
EnumResourceLanguagesA
GetStringTypeExW
GetCPInfo
FreeEnvironmentStringsA
GetEnvironmentStrings
SetUnhandledExceptionFilter

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

iphlpapi

GetIpAddrTable

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

user32

IsWindow
CreateWindowExW
DestroyWindow
EnumChildWindows
SendMessageA
GetDlgItem
GetWindowThreadProcessId

Sections

.text
Size: 93KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ