0a31fa13f96b215fd564128ee8d2eedf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a31fa13f96b215fd564128ee8d2eedf_JaffaCakes118
Size

139KB
MD5

0a31fa13f96b215fd564128ee8d2eedf
SHA1

37aa4c4eb772f339f2e08309e62cc4b435610e37
SHA256

9d3e90c3d8dab15da545496f04981cb80c8ff6d920a125f808ca44b463627ef5
SHA512

15156d84aac8fbc88ca6562315fa3fe46637977f181ccbdb496c7e2810df985bd953dda0d0368e189e0fc8fa78b25ece0ef4ba62118df2eec42f94f5426e1468
SSDEEP

3072:wPWkDDCakNsy6pClryMQLisXm4mzgFmWlrvTofyI6B:cWADCPvlryv64mSmW6yI6B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a31fa13f96b215fd564128ee8d2eedf_JaffaCakes118

Files

0a31fa13f96b215fd564128ee8d2eedf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43e5b238c5ae9f0395e86159ec7ecd08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
AddAtomA
GetModuleHandleA
GetProcAddress
GetProcessHeap
TlsAlloc
EnumResourceLanguagesW
HeapAlloc
GetVersionExA
GetPrivateProfileStructW
HeapFree
TlsGetValue
ExitProcess
TlsSetValue
TlsFree

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

comctl32

ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter

iphlpapi

GetIpAddrTable

shlwapi

StrCmpNIA
StrStrA

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 136KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ