34e6b3fad6a921ffadb25d0ba8df378d_JaffaCakes118

General

Target

34e6b3fad6a921ffadb25d0ba8df378d_JaffaCakes118
Size

282KB
MD5

34e6b3fad6a921ffadb25d0ba8df378d
SHA1

5584e0e3fc1cf43d64531d3ba38d1d4946e241a3
SHA256

339e017c578f19be12c702ae3315dfff2c38ff74b74edd0b67b1e128396a6b06
SHA512

6e7803c21f7d53b7958bcbc9f78d44fe5b7912887eb0be11b28b6941e2234edc55fb69921ef134147eca08c08dfe6f50c82680d0124213159a5b06691498ff6c
SSDEEP

6144:GEyI6bloxCv13SzG6EV0d/YrIE8MFNzG1PFIaDUtQ:2IcoMcEk6NFwtIaQQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34e6b3fad6a921ffadb25d0ba8df378d_JaffaCakes118

Files

34e6b3fad6a921ffadb25d0ba8df378d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83bd94e635d65e92ad97f5adcc54d139

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

SendMessageA
IsWindow
CreateWindowExW
GetDlgItem
DestroyWindow
EnumChildWindows
GetWindowThreadProcessId

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

shell32

SHGetFolderPathW

kernel32

HeapCreate
TlsFree
GetModuleFileNameA
GetCPInfo
SetLastError
AddAtomA
SetEndOfFile
TlsGetValue
GetEnvironmentStrings
GetCurrentProcess
GetLocaleInfoA
GetEnvironmentStringsW
TlsSetValue
TerminateProcess
WriteFile
HeapDestroy
VirtualQuery
EnumResourceLanguagesA
InterlockedExchange
VirtualAlloc
GetStartupInfoA
GetVersionExA
GetOEMCP
GetCurrentProcessId
IsBadWritePtr
HeapSize
lstrcpyW
GetStdHandle
FreeEnvironmentStringsA
QueryPerformanceCounter
UnhandledExceptionFilter
TlsAlloc
GetFileType
FreeEnvironmentStringsW
GetSystemInfo
SetHandleCount
GetSystemTimeAsFileTime
VirtualFree
GetACP
SetUnhandledExceptionFilter

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

Sections

.text
Size: 141KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83bd94e635d65e92ad97f5adcc54d139

Headers

File Characteristics

Imports

newdev

user32

setupapi

iphlpapi

shell32

kernel32

mprapi

Sections

.text Size: 141KB - Virtual size: 272KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 138KB - Virtual size: 137KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 141KB - Virtual size: 272KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 138KB - Virtual size: 137KB

.rsrc
Size: 512B - Virtual size: 4KB