a342358b54f83e52b6f9e42f1656c4a9_JaffaCakes118

General

Target

a342358b54f83e52b6f9e42f1656c4a9_JaffaCakes118
Size

269KB
MD5

a342358b54f83e52b6f9e42f1656c4a9
SHA1

908ac479c10869040c3ad17a912991d4ea950997
SHA256

bba3bd35573bca130e1e837ae714dc07e8c0b7c9f7b420660e0029572dc66151
SHA512

8f4bca6783f4a19914324a0b90eed82608e5d4208b45e0b6839e420ff69ca982164fce73bffc0ec14fac7d2de1523eba05c2a75f1e7b1f51ea7b93cbf9b770d2
SSDEEP

6144:pWFLa71hBbPzJAIwSxoa0o/EKelV3XIlAlLLX51VciOooQvL:pOa7vBPTaue7IOlL750i7tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a342358b54f83e52b6f9e42f1656c4a9_JaffaCakes118

Files

a342358b54f83e52b6f9e42f1656c4a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0032396baf9026cf50191fcb12850963

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
CreateWindowExW
GetDlgItem
IsWindow
SendMessageA
EnumChildWindows
GetWindowThreadProcessId

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

GetSystemInfo
TerminateProcess
FreeEnvironmentStringsA
AddAtomA
GetModuleFileNameA
VirtualAlloc
InterlockedExchange
GetEnvironmentStrings
UnhandledExceptionFilter
VirtualQuery
TlsGetValue
GetSystemTimeAsFileTime
TlsAlloc
HeapDestroy
GetVersionExA
GetStartupInfoA
SetLastError
GetCurrentProcessId
WriteFile
EnumResourceLanguagesA
FreeEnvironmentStringsW
SetEndOfFile
GetCPInfo
TlsFree
GetFileType
GetDiskFreeSpaceW
GetCurrentProcess
VirtualFree
GetACP
HeapCreate
GetOEMCP
TlsSetValue
HeapSize
IsBadWritePtr
SetHandleCount
GetStdHandle
GetEnvironmentStringsW
GetLocaleInfoA
QueryPerformanceCounter
SetUnhandledExceptionFilter

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 126KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0032396baf9026cf50191fcb12850963

Headers

File Characteristics

Imports

user32

mprapi

kernel32

iphlpapi

newdev

shell32

setupapi

Sections

.text Size: 126KB - Virtual size: 274KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 139KB - Virtual size: 138KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 126KB - Virtual size: 274KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 139KB - Virtual size: 138KB

.rsrc
Size: 512B - Virtual size: 4KB