04758c6e027c01cd7231f12fdda5c015_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04758c6e027c01cd7231f12fdda5c015_JaffaCakes118
Size

169KB
MD5

04758c6e027c01cd7231f12fdda5c015
SHA1

7ddbc17d5277181fdc674d252daae90ee2c9f42a
SHA256

ab50bc11c7559e2dae85788a8af01f611e2c62c4e88cabc2eb8b3fb418f9b5ba
SHA512

eb6894410869b3c3a567e26a0bb293b6a106c4efd76d5873f6b27e7397f2f8a1f556a65624f771ca66693e241410ea3d62fec543ffa3aed966505fdbe15f4323
SSDEEP

3072:SDVJI8SZZxU+b2EhfhfI8PTjYZ12Ze2ueo8CdQ6cuDI+WR+W2aXroUMKp+iGKpM:SDnIBZxU+hhfhA8PoZGueZC3D279MKtZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04758c6e027c01cd7231f12fdda5c015_JaffaCakes118

Files

04758c6e027c01cd7231f12fdda5c015_JaffaCakes118
.exe windows:4 windows x86 arch:x86

840579aa01ed8ec443be3cc327038d77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

AddAtomA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
GetOEMCP
EnumResourceLanguagesA
FreeEnvironmentStringsA
GetNumberFormatA
UnhandledExceptionFilter
GetStartupInfoA
GetCPInfo
SetUnhandledExceptionFilter

user32

GetDlgItem
SendMessageA
CreateWindowExW
DestroyWindow
IsWindow
EnumChildWindows
GetWindowThreadProcessId

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 89KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ