b48738e68d3e861384d7442b1b863ab7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b48738e68d3e861384d7442b1b863ab7_JaffaCakes118
Size

168KB
MD5

b48738e68d3e861384d7442b1b863ab7
SHA1

72a710c61c57c741ca7be150bfa675270f482fb4
SHA256

9795de5bfbddacdd059a62c4ce434f6b9f618530d22a23cf89567caf47200228
SHA512

d38a0450ff895ebae7838da7f7ce9317f4729ce26cf588f10bf17596e812fad8eb389ba30baeb8bd1eacbea89982b20960f777c26636d53b1894682f15ee6ac0
SSDEEP

3072:0DLDwrnctVXOZAhE5W7MwOpXpXVnoWAJSUG8mc5XyONAoCA7osSjeq3A:0vsrnctVXKQNMwOr98J9G8nlyONMTsS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b48738e68d3e861384d7442b1b863ab7_JaffaCakes118

Files

b48738e68d3e861384d7442b1b863ab7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68bab9d3dd278f4af53881974cd72002

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

kernel32

AddAtomA
GetEnvironmentStrings
GetCPInfo
GetOEMCP
UnhandledExceptionFilter
WriteFile
FreeEnvironmentStringsA
EnumResourceLanguagesA
GetStringTypeExW
GetStartupInfoA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetUnhandledExceptionFilter

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

EnumChildWindows
IsWindow
CreateWindowExW
SendMessageA
GetDlgItem
DestroyWindow
GetWindowThreadProcessId

newdev

UpdateDriverForPlugAndPlayDevicesW

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

Sections

.text
Size: 85KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ