f64f5448af48ecc0311f8d57cf6336b6_JaffaCakes118

General

Target

f64f5448af48ecc0311f8d57cf6336b6_JaffaCakes118
Size

170KB
MD5

f64f5448af48ecc0311f8d57cf6336b6
SHA1

b17379bc29112114124c4f38969ce639fcdf1f1b
SHA256

759e71c6371706de91cb7a33ed0cdbaaf032f6c975b1e48c7ecdee1d7ef0febf
SHA512

251be2e2faa6d651b97eb5988b2538937b3a4fc8f4c1366a3459aa9e8728985ec17387bbccb998ee3d2d5b5ff652b160ff30dcae7afe554d55fb987caf6262e0
SSDEEP

3072:eXXeVKJJxkrZmcAFgXaNVxL4v0VOyPmvOkbQ/N7JveZjYwJzh0PFncHFNJF/U+:GeVKLFPNVx7VtmOkbG18JWPdIF1U+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f64f5448af48ecc0311f8d57cf6336b6_JaffaCakes118

Files

f64f5448af48ecc0311f8d57cf6336b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f07be0cda1e7e8dd5ae93b416136592d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
SendMessageA
GetDlgItem
CreateWindowExW
EnumChildWindows
DestroyWindow
GetWindowThreadProcessId

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

iphlpapi

GetIpAddrTable

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

AddAtomA
TlsSetValue
GetStartupInfoA
GetSystemInfo
GetLocaleInfoA
GetCurrentProcessId
GetEnvironmentStrings
SetEndOfFile
GetVersionExA
GetFileType
UnhandledExceptionFilter
GetStdHandle
TlsFree
FreeEnvironmentStringsW
GetOEMCP
TlsGetValue
TlsAlloc
SetLastError
GetACP
IsBadWritePtr
SetHandleCount
EnumResourceLanguagesA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
WriteFile
lstrcpynW
QueryPerformanceCounter
GetCPInfo
InterlockedExchange
VirtualFree
HeapDestroy
VirtualAlloc
HeapSize
GetCurrentProcess
HeapCreate
VirtualQuery
GetModuleFileNameA
TerminateProcess
FreeEnvironmentStringsA
SetUnhandledExceptionFilter

Sections

.text
Size: 92KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f07be0cda1e7e8dd5ae93b416136592d

Headers

File Characteristics

Imports

user32

shell32

newdev

iphlpapi

setupapi

mprapi

kernel32

Sections

.text Size: 92KB - Virtual size: 488KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 74KB - Virtual size: 74KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 488KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 74KB - Virtual size: 74KB

.rsrc
Size: 512B - Virtual size: 4KB