f96312e9f0378702d2d7f0a1873f3c40_JaffaCakes118

General

Target

f96312e9f0378702d2d7f0a1873f3c40_JaffaCakes118
Size

283KB
MD5

f96312e9f0378702d2d7f0a1873f3c40
SHA1

0d73654709f1288d91fc8c270097ba6bc15f7ef5
SHA256

45e60b28944266ca9e34bd3177022a4d94822dd2685609fdb0ecf90cd00c688d
SHA512

48598cb13af2100dd595d5091880b1ec5a7621d8fa447c8867bdaffe66407935df3cc39a832da4e6698adbf6c59eef077d3fad514f47df1fd94cf72e59a3b23d
SSDEEP

6144:OaTXCv8JAnSmN3j51mRW+hHKCwRpZoManuphWAJVPA0Y8Yk:LzCvcU391mM+ZKFjJanuqOZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f96312e9f0378702d2d7f0a1873f3c40_JaffaCakes118

Files

f96312e9f0378702d2d7f0a1873f3c40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

118c4d258c923194d4d6fea2e0457b9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW
GetDlgItem
SendMessageA
DestroyWindow
EnumChildWindows
IsWindow
GetWindowThreadProcessId

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
GetCPInfo
UnhandledExceptionFilter
VirtualFree
AddAtomA
TlsGetValue
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapSize
GetStdHandle
TlsAlloc
GetVersionExA
SetLastError
SetHandleCount
TlsSetValue
GetStartupInfoA
HeapCreate
FreeEnvironmentStringsA
EnumResourceLanguagesA
GetCurrentProcess
QueryPerformanceCounter
SetEndOfFile
lstrcpynW
InterlockedExchange
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualAlloc
WriteFile
GetFileType
IsBadWritePtr
HeapDestroy
GetOEMCP
TlsFree
TerminateProcess
GetSystemInfo
GetACP
VirtualQuery
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

Sections

.text
Size: 148KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

118c4d258c923194d4d6fea2e0457b9a

Headers

File Characteristics

Imports

user32

setupapi

kernel32

newdev

shell32

mprapi

iphlpapi

Sections

.text Size: 148KB - Virtual size: 283KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 132KB - Virtual size: 131KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 148KB - Virtual size: 283KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 132KB - Virtual size: 131KB

.rsrc
Size: 512B - Virtual size: 4KB