637ab7be8fb1e3d1bd8a1837c384763c_JaffaCakes118

General

Target

637ab7be8fb1e3d1bd8a1837c384763c_JaffaCakes118
Size

282KB
MD5

637ab7be8fb1e3d1bd8a1837c384763c
SHA1

6b26a5479db5f46f08b210894cd824bd7889b9f6
SHA256

03c5feacf53e7ffb0c0dfbb057184ff86ea4c52e74a525776098a0d03bf79ab8
SHA512

6f23bf76f63a7ac460165b95c468f303dd388c5d04ba110a28b5b5ec609b601d4282f8e8ffa614478511a0d76cc3d00da1cd1899a9a5aa45dcde8302c5178f88
SSDEEP

6144:1YuUa8TcIuw4mPMZ50HFGgGfILJ/Zv/TGmUs+xkFrb+ANbsj:1JHB10w8L5F/TG/k59U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
637ab7be8fb1e3d1bd8a1837c384763c_JaffaCakes118

Files

637ab7be8fb1e3d1bd8a1837c384763c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1350e794bfa1dcf13d500dc702c56937

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

FreeEnvironmentStringsA
AddAtomA
TlsGetValue
GetCPInfo
TlsAlloc
GetOEMCP
VirtualQuery
VirtualFree
IsBadWritePtr
GetFileType
GetStartupInfoA
GetEnvironmentStrings
GetSystemTimeAsFileTime
GetStdHandle
GetModuleFileNameA
InterlockedExchange
GetVersionExA
UnhandledExceptionFilter
EnumResourceLanguagesA
HeapDestroy
GetCurrentProcessId
SetHandleCount
FreeEnvironmentStringsW
lstrcpynW
GetEnvironmentStringsW
GetACP
TlsFree
GetLocaleInfoA
QueryPerformanceCounter
SetLastError
VirtualAlloc
GetSystemInfo
HeapSize
HeapCreate
WriteFile
TlsSetValue
SetEndOfFile
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

IsWindow
SendMessageA
EnumChildWindows
GetDlgItem
DestroyWindow
CreateWindowExW
GetWindowThreadProcessId

Sections

.text
Size: 140KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1350e794bfa1dcf13d500dc702c56937

Headers

File Characteristics

Imports

mprapi

kernel32

setupapi

iphlpapi

shell32

newdev

user32

Sections

.text Size: 140KB - Virtual size: 275KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 138KB - Virtual size: 138KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 140KB - Virtual size: 275KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 138KB - Virtual size: 138KB

.rsrc
Size: 512B - Virtual size: 4KB