a7153808980b5f7d301918b3b206997a_JaffaCakes118

General

Target

a7153808980b5f7d301918b3b206997a_JaffaCakes118
Size

12KB
MD5

a7153808980b5f7d301918b3b206997a
SHA1

1fc4483ee7617956f92ccca74a2bedb592b52dd9
SHA256

c14ef37904cc05515864786e30866b0e2aa8960ae72c111ecf144804beaa1db4
SHA512

908939f5b6d983ba40c88ef49ae9b9cae95d4b4d26805e4fd85d628572a77d9c59116ae39744b55c582d01ed4c1fb22e6880794dda8d5bb6b096d79df83bf8a1
SSDEEP

192:60SAyLTljgz1zGsvVpcTZnB/mNyndoOeP2r5L3HAn3brgWTlwyrQfcjIb/:6HLTljgz1SAapnSjP2Vbgnr0ihrQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7153808980b5f7d301918b3b206997a_JaffaCakes118

Files

a7153808980b5f7d301918b3b206997a_JaffaCakes118
.exe windows:6 windows x86 arch:x86

67720c8ba0dd0cac6d61364096add04a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\winddk\5600\src\usb\usb-osf\objfre_wxp_x86\i386\usbview.pdb

Imports

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleHandleA
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
CreateFileA
CloseHandle
DeviceIoControl
WideCharToMultiByte
GlobalAlloc
QueryPerformanceCounter
GlobalFree
SetUnhandledExceptionFilter

user32

wsprintfA

msvcrt

_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_stricmp
sscanf
memset
memcpy
vsprintf
fopen
fprintf
fclose
_cexit
__getmainargs

cfgmgr32

CM_Get_Device_IDA
CM_Get_Parent
CM_Get_Child
CM_Get_DevNode_Registry_PropertyA
CM_Locate_DevNodeA
CM_Get_Sibling

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67720c8ba0dd0cac6d61364096add04a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcrt

cfgmgr32

setupapi

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 16B