761533a58e9678720bd218b10e943d80_JaffaCakes118 | Triage

Sharing

General

Target

761533a58e9678720bd218b10e943d80_JaffaCakes118
Size

1.9MB
MD5

761533a58e9678720bd218b10e943d80
SHA1

f3d4c60f04e96aa3f9b6227ce60d1c87eff51058
SHA256

873becc2d2a5b3c84ab132a7b677088a5e92a72bbe0883861513f5e786e6b9c2
SHA512

84633493280ac2adcb89c718a1b7b9dfccbe74db03f4058d24a0ae2099bb53c74835e3ca47ce71fc0af181484eab097b73085adf2cac1e9872c148dc4d182405
SSDEEP

24576:l39ZDtTS7od7341D2+jjqBicDSdwAO3BECoRWz5smhqzxGkdNrAQDEyYECMrU1y:l3dh73WD2IcicDsZO3BjwG5h+dJfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
761533a58e9678720bd218b10e943d80_JaffaCakes118

Files

761533a58e9678720bd218b10e943d80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7685fe5812075fbcd366d8b2e3d64af8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

AddAtomA
UnhandledExceptionFilter
GetOEMCP
FreeEnvironmentStringsA
WriteFile
GetEnvironmentStringsW
EnumResourceLanguagesW
GetEnvironmentStrings
GetPrivateProfileStructW
GetCPInfo
GetStartupInfoA
FreeEnvironmentStringsW
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

StrCmpNIA
StrStrA

iphlpapi

GetIpAddrTable

Sections

.text
Size: 903KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1021KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ