71391281f30117266ecd4f083ee81710_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

71391281f30117266ecd4f083ee81710_JaffaCakes118
Size

91KB
MD5

71391281f30117266ecd4f083ee81710
SHA1

b23eeeb3f6af8d004d29acb33dc3b4cabc64d771
SHA256

19321549c048af5767c3ff1cfcac22e746dfddf8e09300276475834d668e4938
SHA512

e196044b0e950d208cb0ecf44d009d6c620033a842cef8309d92f935e06eb85e97807bad0e7fa8c050d27bc2f2140cf64d2a77c0a37f8fee6edbbb67a300e52e
SSDEEP

1536:294lvZfLxE7y06K423ZgCFR5TqedMR7D3bqdwlBncvotUx3HcewEFM8Kx/9u/:22dC7aqZgMVqvzqdwlBncvotUV8EFGu/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71391281f30117266ecd4f083ee81710_JaffaCakes118

Files

71391281f30117266ecd4f083ee81710_JaffaCakes118
.exe windows:1 windows x86 arch:x86

710112479db6736daf8e2174fd860882

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
sprintf
_c_exit
_initterm
_XcptFilter
__setusermatherr
exit
__getmainargs
printf
setlocale
__initenv
_controlfp
_exit
wprintf
__set_app_type

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW

kernel32

OpenMutexW
CreateSemaphoreA
CloseConsoleHandle
AddVectoredExceptionHandler
EnumSystemLocalesW
SetConsoleCursor
CreateFileMappingW
GetVersionExW
FormatMessageW
CmdBatNotification
TlsAlloc
EnumDateFormatsA
VirtualAlloc
InitializeSListHead
GetConsoleOutputCP
GetStringTypeW
GetTickCount
CreateTimerQueueTimer
SetThreadAffinityMask
GetDateFormatA
IsProcessorFeaturePresent
FindFirstChangeNotificationA
GetConsoleAliasesA
SetThreadIdealProcessor
GetProcessVersion
SetFilePointer
SetConsoleIcon
SignalObjectAndWait
GetStartupInfoA
GetCurrentActCtx
InitializeCriticalSectionAndSpinCount
GetPrivateProfileStringW
ConsoleMenuControl
EnumLanguageGroupLocalesA
GetOEMCP
GetConsoleCursorInfo
SetThreadUILanguage
SetThreadAffinityMask
ReadFileEx
SetConsoleCursorPosition
SetVolumeMountPointA
GetUserDefaultLCID
GetExpandedNameW
SetFileApisToOEM
GlobalHandle
GetVolumePathNamesForVolumeNameA
SetConsoleOutputCP
ReadConsoleW
LocalCompact
GetCurrentThread
SetConsoleScreenBufferSize
FindNextVolumeA
lstrcat
GetProcessAffinityMask
EnumDateFormatsExA
FileTimeToSystemTime
RegisterWaitForSingleObject
CopyFileA
SetThreadLocale
GlobalAlloc
SetTermsrvAppInstallMode
GetCommMask
LockResource
ReplaceFile
GetCurrentProcess

ntprint

PSetupGetLocalDataField
PSetupDestroyPrinterDeviceInfoList
PSetupDestroySelectedDriverInfo
PSetupIsDriverInstalled
PSetupFreeMem
PSetupCreateMonitorInfo
PSetupInstallPrinterDriver
PSetupInstallMonitor
PSetupCreatePrinterDeviceInfoList

setupapi

CM_Intersect_Range_List
SetupScanFileQueue
pSetupEnablePrivilege
SetupCopyErrorW
CM_Get_DevNode_Registry_Property_ExA
CM_Get_DevNode_Status
pSetupUnmapAndCloseFile
pSetupUnicodeToMultiByte
CM_Get_Hardware_Profile_InfoA
SetupDiGetClassDevPropertySheetsW
SetupQueueCopySectionW
CM_Get_Device_Interface_List_ExA
SetupPromptForDiskA
CM_Get_Device_Interface_Alias_ExW
SetupCopyErrorA
SetupCopyOEMInfW
CM_Get_Res_Des_Data
SetupVerifyInfFileA
SetupGetInfInformationA
SetupDiSelectDevice
SetupDiSetDeviceInterfaceDefault
pSetupWriteLogError
SetupDiOpenDeviceInterfaceRegKey
SetupDiSetDeviceInstallParamsW
CM_Get_Device_Interface_List_ExW
SetupQueueCopySectionA
CM_Free_Log_Conf
SetupBackupErrorW
SetupQueryInfOriginalFileInformationA
SetupGetLineTextA
CM_Request_Device_Eject_ExA
SetupDiGetClassDescriptionExW
CM_Get_DevNode_Custom_Property_ExA
CM_Set_HW_Prof_Flags_ExW
CM_Run_Detection
CM_Get_Class_NameW
CM_Query_And_Remove_SubTree_ExA
CM_Create_DevNode_ExA
CM_Get_Device_ID_List_ExW
SetupGetTargetPathA
SetupDiMoveDuplicateDevice
SetupDiGetINFClassA
pSetupAccessRunOnceNodeList
pSetupGetFileTitle
SetupQueryDrivesInDiskSpaceListW
SetupOpenAppendInfFileA
SetupInstallServicesFromInfSectionExA
SetupQueueDeleteW
SetupSetNonInteractiveMode
SetupQueueDefaultCopyW
pSetupFree
SetupDiOpenDeviceInterfaceW
SetupDiGetDriverInstallParamsA
CM_Set_HW_Prof_FlagsW
IsUserAdmin
CM_Enumerate_Classes_Ex
CM_Get_Parent_Ex
SetupGetIntField
CM_Delete_DevNode_Key_Ex
SetupOpenMasterInf
SetupQueueDeleteSectionA
CM_Next_Range
SetupQuerySourceListW
SetupPromptReboot
SetupRemoveFromDiskSpaceListA
SetupGetSourceInfoW
SetupRemoveFromSourceListW
SetupDiGetClassInstallParamsA
CM_Query_Arbitrator_Free_Data_Ex
SetupDiCreateDeviceInterfaceW
SetupQueueDefaultCopyA
SetupGetFileCompressionInfoA
SetupAdjustDiskSpaceListA
SetupInstallServicesFromInfSectionA
SetupUninstallOEMInfA
CM_Get_Next_Log_Conf_Ex
SetupOpenInfFileA
SetupInstallServicesFromInfSectionW
CM_Get_HW_Prof_FlagsW
pSetupDuplicateString
pSetupGetField
CM_Get_Sibling
SetupAddInstallSectionToDiskSpaceListW
SetupDiCreateDeviceInterfaceRegKeyA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rrq
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

710112479db6736daf8e2174fd860882

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

ntprint

setupapi

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 6KB - Virtual size: 5KB

.Rrq Size: 1KB - Virtual size: 35KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 47KB - Virtual size: 46KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 6KB - Virtual size: 5KB

.Rrq
Size: 1KB - Virtual size: 35KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 47KB - Virtual size: 46KB