3641f4dca137eea606649971f05b11e6_JaffaCakes118

General

Target

3641f4dca137eea606649971f05b11e6_JaffaCakes118
Size

169KB
MD5

3641f4dca137eea606649971f05b11e6
SHA1

c9e922ee82453a9b47be2040d4c75914fc809f74
SHA256

aa98a3fb6ae9225889a4814ea90dcd3eb3ff5a52ab1d31b4c1e5c3839772d843
SHA512

6e0de08be85437bbdf803e51c8eb45b0900aa3fb054fdda83b92bcac7231278c19a9f3589221dbe7d4b5f13e4b0aba0aee7cf92d651482ed8e072493c89dd623
SSDEEP

3072:9luva711DhwLyVNKE+4XR0wQtodtffAPfWRIo0p8TLRv0FAOojcFboJVl+F2Zv1c:P4u1wyCELF0EpoHWmoywR0bojcJ2F1c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3641f4dca137eea606649971f05b11e6_JaffaCakes118

Files

3641f4dca137eea606649971f05b11e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70e94c4c3204a5b98459d4850c6d94c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

user32

IsWindow
DestroyWindow
GetDlgItem
CreateWindowExW
EnumChildWindows
SendMessageA
GetWindowThreadProcessId

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetModuleFileNameA
InterlockedExchange
WriteFile
HeapSize
AddAtomA
UnhandledExceptionFilter
TerminateProcess
GetLocaleInfoA
GetOEMCP
TlsAlloc
SetLastError
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEndOfFile
TlsSetValue
GetSystemTimeAsFileTime
GetCurrentProcessId
GetFileType
EnumResourceLanguagesA
IsBadWritePtr
GetEnvironmentStringsW
GetCurrentProcess
lstrcpyW
SetHandleCount
GetStartupInfoA
VirtualFree
GetACP
GetSystemInfo
FreeEnvironmentStringsA
TlsGetValue
QueryPerformanceCounter
TlsFree
HeapDestroy
GetCPInfo
GetStdHandle
VirtualQuery
GetVersionExA
VirtualAlloc
SetUnhandledExceptionFilter

Sections

.text
Size: 88KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70e94c4c3204a5b98459d4850c6d94c5

Headers

File Characteristics

Imports

iphlpapi

user32

mprapi

shell32

setupapi

newdev

kernel32

Sections

.text Size: 88KB - Virtual size: 484KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 77KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 484KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 77KB

.rsrc
Size: 512B - Virtual size: 4KB