388faba9570191cf67dc9cd2ac19ac3d_JaffaCakes118

General

Target

388faba9570191cf67dc9cd2ac19ac3d_JaffaCakes118
Size

185KB
MD5

388faba9570191cf67dc9cd2ac19ac3d
SHA1

20560941b3d893d8a041c73451b0d17a4c8b8469
SHA256

bddb57940819846c2eeae76159f755048413771c1a7eb75c8a42e7d5d363be1a
SHA512

146a130426e8813694e7f68b8d8354f25b3d72b151613b949de5e155eaf3b1e3116866fc98defbcb4f6c1fdc252aa204f8442f9714a7550f4b8b1cacbc33ea5a
SSDEEP

3072:2JvyWk2bvPIuWalwbSiFe1gOG2hDGaScFSTNQ8iRDLxG6eprU5gDigp3T8gkZcDs:qvXtvPgaWSi0o2hb54TRY97erU5gWwDU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
388faba9570191cf67dc9cd2ac19ac3d_JaffaCakes118

Files

388faba9570191cf67dc9cd2ac19ac3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16a34ef600f76882491b71a330a9d8a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

shell32

SHGetFolderPathW

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

user32

EnumChildWindows
CreateWindowExW
SendMessageA
DestroyWindow
GetDlgItem
IsWindow
GetWindowThreadProcessId

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetEnvironmentStrings
WriteFile
VirtualFree
GetCurrentProcess
TlsGetValue
FreeEnvironmentStringsA
AddAtomA
TerminateProcess
GetModuleFileNameA
UnhandledExceptionFilter
GetStartupInfoA
VirtualAlloc
SetEndOfFile
GetFileType
TlsAlloc
GetVersionExA
GetACP
EnumResourceLanguagesA
GetEnvironmentStringsW
GetCurrentProcessId
GetLocaleInfoA
QueryPerformanceCounter
HeapSize
InterlockedExchange
GetSystemInfo
lstrcpyW
VirtualQuery
GetStdHandle
GetOEMCP
HeapDestroy
TlsFree
SetHandleCount
IsBadWritePtr
GetCPInfo
SetLastError
HeapCreate
GetSystemTimeAsFileTime
TlsSetValue
FreeEnvironmentStringsW
SetUnhandledExceptionFilter

Sections

.text
Size: 93KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16a34ef600f76882491b71a330a9d8a3

Headers

File Characteristics

Imports

setupapi

shell32

mprapi

user32

iphlpapi

newdev

kernel32

Sections

.text Size: 93KB - Virtual size: 237KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 88KB - Virtual size: 87KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 237KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 88KB - Virtual size: 87KB

.rsrc
Size: 512B - Virtual size: 4KB