3468995d5bb98374935efec8879abdac_JaffaCakes118

General

Target

3468995d5bb98374935efec8879abdac_JaffaCakes118
Size

282KB
MD5

3468995d5bb98374935efec8879abdac
SHA1

1b96d546fe704f3126a7f6694c7cf98a2933199e
SHA256

6198bd3e4cf084b8234e0c96424d684d865c091a12a810eafffdd59c63b3182e
SHA512

1c449c93c413e890a2e01e89573d50a192beb933d1f28287daf82740b64b4797c767c17be7adf4d41cd0102e60546448fdf880d02ef5ef167a629d3bc8d967c8
SSDEEP

6144:LS1+9/MuIs4ZLExAWD5sKee+p77TSG5JlVvE9T7mDSZFpN8/9cLiZZX:LqKIsCLQDXHy7ll9sT7m2ZFpN8/h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3468995d5bb98374935efec8879abdac_JaffaCakes118

Files

3468995d5bb98374935efec8879abdac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7deb64b11e3ec73187f4cd94b5fe3359

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumChildWindows
GetDlgItem
SendMessageA
CreateWindowExW
DestroyWindow
IsWindow
GetWindowThreadProcessId

kernel32

VirtualAlloc
GetStartupInfoA
TlsGetValue
AddAtomA
IsBadWritePtr
UnhandledExceptionFilter
GetCurrentProcess
GetCPInfo
HeapSize
FreeEnvironmentStringsW
WriteFile
GetEnvironmentStringsW
GetStdHandle
VirtualQuery
HeapCreate
TlsAlloc
GetACP
SetLastError
GetModuleFileNameA
QueryPerformanceCounter
HeapDestroy
EnumResourceLanguagesA
GetCurrentProcessId
GetLocaleInfoA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
TerminateProcess
GetSystemInfo
lstrcpyW
SetEndOfFile
InterlockedExchange
SetHandleCount
TlsSetValue
GetVersionExA
GetFileType
VirtualFree
TlsFree
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter

iphlpapi

GetIpAddrTable

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 143KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7deb64b11e3ec73187f4cd94b5fe3359

Headers

File Characteristics

Imports

user32

kernel32

iphlpapi

mprapi

newdev

shell32

setupapi

Sections

.text Size: 143KB - Virtual size: 278KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 136KB - Virtual size: 135KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 143KB - Virtual size: 278KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 136KB - Virtual size: 135KB

.rsrc
Size: 512B - Virtual size: 4KB