10b7f7af0d0412fd4b1a6dc53b53f2ca_JaffaCakes118

General

Target

10b7f7af0d0412fd4b1a6dc53b53f2ca_JaffaCakes118
Size

269KB
MD5

10b7f7af0d0412fd4b1a6dc53b53f2ca
SHA1

f1c32a4725166496c7a1b424bd23cc72793e9884
SHA256

b762b006dbed47b5afd4cb0fb89d60a1634f579e24545e7e996b98ed0f40d981
SHA512

e7057fe71b94a01232dbfc27d6c888df689a6f3e1db0fe2141e14e3454e9c3ccd65b980b70c5a422add19c0db28daddf593cf88aa9ec25ad097d490fcf0ae9ce
SSDEEP

6144:T2Re9ZZxya5dWklbo4fqZ9BeS1C53HLkpS9GxqJkGN:T2Ry8aLWk5faXYFHLk8u2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10b7f7af0d0412fd4b1a6dc53b53f2ca_JaffaCakes118

Files

10b7f7af0d0412fd4b1a6dc53b53f2ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da81be2bba3ddf9d75c6b01740e0c124

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

EnumChildWindows
CreateWindowExW
GetDlgItem
DestroyWindow
SendMessageA
IsWindow
GetWindowThreadProcessId

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

kernel32

GetCurrentProcess
HeapCreate
AddAtomA
GetVersionExA
WriteFile
GetSystemInfo
GetStdHandle
HeapSize
GetSystemTimeAsFileTime
GetLocaleInfoA
SetEndOfFile
InterlockedExchange
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
GetFileType
VirtualAlloc
GetCurrentProcessId
SetHandleCount
VirtualQuery
EnumResourceLanguagesA
TlsGetValue
SetLastError
QueryPerformanceCounter
GetEnvironmentStrings
GetStartupInfoA
FormatMessageW
GetEnvironmentStringsW
TlsAlloc
TlsFree
GetACP
TlsSetValue
VirtualFree
FreeEnvironmentStringsA
HeapDestroy
GetCPInfo
GetOEMCP
FreeEnvironmentStringsW
IsBadWritePtr
SetUnhandledExceptionFilter

Sections

.text
Size: 135KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da81be2bba3ddf9d75c6b01740e0c124

Headers

File Characteristics

Imports

setupapi

shell32

newdev

user32

mprapi

iphlpapi

kernel32

Sections

.text Size: 135KB - Virtual size: 278KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 131KB - Virtual size: 131KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 135KB - Virtual size: 278KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 131KB - Virtual size: 131KB

.rsrc
Size: 512B - Virtual size: 4KB