60d1d50393e7a44b6b26823299adb56e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60d1d50393e7a44b6b26823299adb56e_JaffaCakes118
Size

279KB
MD5

60d1d50393e7a44b6b26823299adb56e
SHA1

4c84c15a3c40a30ac52f6461383c7b71190ef32f
SHA256

40cafcfc458575abefad0223d06e058e4af05c3bb319687a155c2e0f79b4a3ed
SHA512

26a014588dbd668f24026c378134a2f9d9b2bc9feed4e118081dd948db5437ca2704d359fb235b76b6678aa1df1cddab1a73945d687d6600875c5a9021c0b680
SSDEEP

6144:J7ng+l65RAHqjeEnozHOEKS64yoRHfmTj8UiUDTQv:J7+RGgdozHLDLRH+NXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60d1d50393e7a44b6b26823299adb56e_JaffaCakes118

Files

60d1d50393e7a44b6b26823299adb56e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

024c7ffedda7847622829546224ab03b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

kernel32

UnhandledExceptionFilter
AddAtomA
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
EnumResourceLanguagesA
WriteFile
GetNumberFormatW
GetStartupInfoA
GetEnvironmentStringsW
GetCPInfo
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

EnumChildWindows
GetDlgItem
DestroyWindow
CreateWindowExW
SendMessageA
IsWindow
GetWindowThreadProcessId

Sections

.text
Size: 142KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ