d19f0fdeb4e6aab014d6d1ca247a256f_JaffaCakes118

General

Target

d19f0fdeb4e6aab014d6d1ca247a256f_JaffaCakes118
Size

279KB
MD5

d19f0fdeb4e6aab014d6d1ca247a256f
SHA1

ee32e373a7f97dd6a06dced860971566a6f173ce
SHA256

a28d071ab55fa86bea99598749768fb8af37d0c75669c1d9b108eccea3633c87
SHA512

1cba15f7e8712aac08cd3b12992cbcf908c7a89489185a2e99048e1034c057f0776e2a1f199dfcf83117c75b6d25ce01cf90d170b268f566ba69c4fed48bd473
SSDEEP

6144:2RBSCIYJXQU/qaNr1gyL0bwPcJSJJ+WTO:2R5IgX//qmr1gTbsJB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d19f0fdeb4e6aab014d6d1ca247a256f_JaffaCakes118

Files

d19f0fdeb4e6aab014d6d1ca247a256f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad4b7ed52d46c6255870e4dae4b321ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

shlwapi

StrCmpNIA
StrStrA

shell32

SHGetFolderPathW

kernel32

GetProcessHeap
CreateSemaphoreA
GetLastError
LockResource
CreateFileW
LoadResource
ResetEvent
FreeLibrary
AddAtomW
WideCharToMultiByte
WaitForMultipleObjects
lstrlenA
InterlockedIncrement
SetThreadPriority
VirtualFree
CreateMutexA
LoadLibraryW
VirtualAlloc
GetCurrentProcessId
FindResourceA
GetSystemInfo
LoadLibraryA
EnterCriticalSection
GetTickCount
EnumResourceLanguagesW
GlobalAlloc
GetThreadPriority
GetModuleFileNameW
ReleaseMutex
ReleaseSemaphore
LeaveCriticalSection
HeapFree
MultiByteToWideChar
GetGeoInfoW
TerminateThread
IsBadReadPtr
Sleep
InterlockedDecrement
GetModuleFileNameA
GetSystemTime
QueryPerformanceCounter
IsBadWritePtr
GetProcAddress
GetExitCodeThread
GetCurrentThreadId
DisableThreadLibraryCalls
GetCurrentThread
ExitProcess

Sections

.text
Size: 141KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad4b7ed52d46c6255870e4dae4b321ee

Headers

File Characteristics

Imports

comctl32

newdev

setupapi

iphlpapi

shlwapi

shell32

kernel32

Sections

.text Size: 141KB - Virtual size: 276KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 134KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 141KB - Virtual size: 276KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 134KB

.rsrc
Size: 512B - Virtual size: 4KB