65d0e3b07518557a214796cf86e03ab5_JaffaCakes118

General

Target

65d0e3b07518557a214796cf86e03ab5_JaffaCakes118
Size

285KB
MD5

65d0e3b07518557a214796cf86e03ab5
SHA1

ec46f9104a3553a6cc122c22fed29bba6ea52037
SHA256

ee335ca17d4d82ccef4904d0a8328ea950adae191f7087d9bada1ad7da507d06
SHA512

bb3e8a7d9395a907cc8931900d6c71ef56e846df13c155c2d9bf7b3215ab0eff16b603a0217b41cde8dce02b9b4e74d145764c13dd1d12921578231a9c6d9cda
SSDEEP

6144:pt+0Yu+y21IszRyAB3pKE7rrmhmOKdd0K6PfmlYM1T:dp+y2S03HHrm1QP6Pfm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65d0e3b07518557a214796cf86e03ab5_JaffaCakes118

Files

65d0e3b07518557a214796cf86e03ab5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5265db6703335c860a760058ba1bd93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

GetDlgItem
DestroyWindow
EnumChildWindows
CreateWindowExW
SendMessageA
IsWindow
GetWindowThreadProcessId

iphlpapi

GetIpAddrTable

setupapi

CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

shell32

SHGetFolderPathW

kernel32

VirtualAlloc
AddAtomA
GetModuleFileNameA
GetEnvironmentStrings
UnhandledExceptionFilter
HeapSize
HeapCreate
TlsGetValue
WriteFile
GetStdHandle
GetLocaleInfoA
TerminateProcess
HeapDestroy
GetCPInfo
GetFileType
SetHandleCount
SetLastError
EnumResourceNamesA
VirtualFree
TlsSetValue
VirtualQuery
GetCurrentProcess
IsBadWritePtr
TlsFree
FreeEnvironmentStringsW
GetSystemInfo
GetStartupInfoA
InterlockedExchange
lstrcatA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
QueryPerformanceCounter
TlsAlloc
GetVersionExA
SetEndOfFile
GetACP
GetCurrentProcessId
GetOEMCP
SetUnhandledExceptionFilter

Sections

.text
Size: 151KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5265db6703335c860a760058ba1bd93

Headers

File Characteristics

Imports

mprapi

newdev

user32

iphlpapi

setupapi

shell32

kernel32

Sections

.text Size: 151KB - Virtual size: 287KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 130KB - Virtual size: 129KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 151KB - Virtual size: 287KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 130KB - Virtual size: 129KB

.rsrc
Size: 512B - Virtual size: 4KB