ab7a5f7eb3195bdef82aabaca105f9e0_JaffaCakes118

General

Target

ab7a5f7eb3195bdef82aabaca105f9e0_JaffaCakes118
Size

283KB
MD5

ab7a5f7eb3195bdef82aabaca105f9e0
SHA1

75188ed5e7e9c12387797512b28c2ea055265b3b
SHA256

dbf315ace7a5acfdfaa0ee3a9e1345d83e0600e1d9e69fd293b165fc3167a74f
SHA512

88c3d8507bf5ac2b6285ff3e1ef2d879afa824c00c8c3e3db495020dd9ed1cb11cdcc67f4057b38a563f4169c16d2f87e0af5477128c96ce9ec6affe17960814
SSDEEP

6144:86QlCyxUmQ8ONDo7EHCeV5O+qJYasj2/ZWYc+MgNrPdglPX:86QlLx+8mk7Eic5uJZsyBWMMqrPdg9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab7a5f7eb3195bdef82aabaca105f9e0_JaffaCakes118

Files

ab7a5f7eb3195bdef82aabaca105f9e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1951f245a8c42f03daa378d2d4445e97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetCurrentProcessId
GetEnvironmentStringsW
UnhandledExceptionFilter
GetSystemInfo
AddAtomA
SetLastError
HeapCreate
GetLocaleInfoA
GetOEMCP
GetCurrentProcess
TlsAlloc
HeapDestroy
SetHandleCount
GetModuleFileNameA
VirtualFree
TlsFree
SetEndOfFile
GetStartupInfoA
GetCPInfo
GetVersionExA
EnumResourceLanguagesA
TlsSetValue
VirtualAlloc
HeapSize
FormatMessageW
InterlockedExchange
WriteFile
TlsGetValue
IsBadWritePtr
GetStdHandle
TerminateProcess
GetEnvironmentStrings
GetACP
VirtualQuery
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
FreeEnvironmentStringsA
QueryPerformanceCounter
SetUnhandledExceptionFilter

shell32

SHGetFolderPathW

iphlpapi

GetIpAddrTable

user32

EnumChildWindows
SendMessageA
DestroyWindow
CreateWindowExW
GetDlgItem
IsWindow
GetWindowThreadProcessId

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 144KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1951f245a8c42f03daa378d2d4445e97

Headers

File Characteristics

Imports

kernel32

shell32

iphlpapi

user32

setupapi

mprapi

newdev

Sections

.text Size: 144KB - Virtual size: 279KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 136KB - Virtual size: 135KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 279KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 136KB - Virtual size: 135KB

.rsrc
Size: 512B - Virtual size: 4KB