3b05e67cb71822fe690c093ae65d7a59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b05e67cb71822fe690c093ae65d7a59_JaffaCakes118
Size

193KB
MD5

3b05e67cb71822fe690c093ae65d7a59
SHA1

b0962b5f9677434500e3b74b2e9ed8edb0b94d03
SHA256

66bba7587f45f1328b17b2d0169f1c47f9fe353039b17c170340f119efbbe185
SHA512

0082a52119ec3e5bece0a76c892a898a151f73e31b53af9184c8419ff6ce5d48eb5367b53d0184fb18a9165fe1141f7889d667df682e170cf43f7a9afe686785
SSDEEP

6144:DJukBeNsKCa6aT6MAS3OyEU4wEqwnhIPC9kjilMP:RKz6a0PfIPSkjJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b05e67cb71822fe690c093ae65d7a59_JaffaCakes118

Files

3b05e67cb71822fe690c093ae65d7a59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56be3450ccb553f236267360fea1ca75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

kernel32

AddAtomA
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStartupInfoA
UnhandledExceptionFilter
EnumResourceLanguagesA
GetEnvironmentStringsW
GetOEMCP
GetStringTypeExW
GetCPInfo
GetEnvironmentStrings
SetUnhandledExceptionFilter

user32

GetDlgItem
CreateWindowExW
SendMessageA
EnumChildWindows
IsWindow
DestroyWindow
GetWindowThreadProcessId

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 136KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ