37fb4d638e5f164ff9753adbc66470df_JaffaCakes118

General

Target

37fb4d638e5f164ff9753adbc66470df_JaffaCakes118
Size

178KB
MD5

37fb4d638e5f164ff9753adbc66470df
SHA1

5bd3e05889b78ec66b5f767d39f92cf7706c1afd
SHA256

7c2869065168c2a0696764c136859aab63b2064e4c7d477b4818bac605a81205
SHA512

14d7e40ef77627715d601730005dbde1c892dbdda46b15e1cd67bbca6508a933147f0c33c906619bd9c53d7199aedd26de988ca9b751889b63211df031386ca4
SSDEEP

3072:6hfJcn8D2jiL5gLI3t2vrYuLWYKodHOdaas+3BjgfvmVvPK+hMJa:Kfs86ji9j3E3LWZodHSRt9gfvmNK+hMJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37fb4d638e5f164ff9753adbc66470df_JaffaCakes118

Files

37fb4d638e5f164ff9753adbc66470df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

539e3ace69ce093c76311df320efe269

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

TlsFree
WriteFile
GetModuleFileNameA
TerminateProcess
TlsAlloc
SetHandleCount
AddAtomA
TlsGetValue
IsBadWritePtr
UnhandledExceptionFilter
GetFileType
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
EnumResourceNamesW
InterlockedExchange
VirtualFree
GetCurrentProcess
VirtualQuery
TlsSetValue
FreeEnvironmentStringsA
HeapCreate
GetLocaleInfoA
GetACP
GetEnvironmentStringsW
GetCPInfo
lstrcatW
SetLastError
HeapDestroy
GetVersionExA
GetStartupInfoA
GetEnvironmentStrings
GetOEMCP
FreeEnvironmentStringsW
SetEndOfFile
HeapSize
SetUnhandledExceptionFilter

shell32

SHGetFolderPathW

iphlpapi

GetIpAddrTable

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

SendMessageA
GetDlgItem
EnumChildWindows
CreateWindowExW
DestroyWindow
IsWindow
GetWindowThreadProcessId

Sections

.text
Size: 92KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

539e3ace69ce093c76311df320efe269

Headers

File Characteristics

Imports

newdev

mprapi

kernel32

shell32

iphlpapi

setupapi

user32

Sections

.text Size: 92KB - Virtual size: 244KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 82KB - Virtual size: 81KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 244KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 82KB - Virtual size: 81KB

.rsrc
Size: 512B - Virtual size: 4KB