d50a85152019db21ee360180ae5980d4_JaffaCakes118 | Triage

Sharing

General

Target

d50a85152019db21ee360180ae5980d4_JaffaCakes118
Size

1.9MB
MD5

d50a85152019db21ee360180ae5980d4
SHA1

02dae0d2a018c4fd32d12113bb6a38bf7ac63f70
SHA256

fe2351aab904fea18c08e92562655bbcad81344f2d76694a706b579ef4d23344
SHA512

0d411a13a2fea9687e2b234e42ea6991832e1c02e90b40f7d79bf6b49a793432a6e555c6becbb38dd2f33f0d22751de94bfca92eee85aac8869460d23f1e8c22
SSDEEP

49152:IyC6Gn7rPcqIKaxPqAlTRo122ep1C+D/cHmfg6s:Il6GMdP0aTRYTep8+7cUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d50a85152019db21ee360180ae5980d4_JaffaCakes118

Files

d50a85152019db21ee360180ae5980d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2ac2a13be6a0e20d0f029532fbc9b3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

AddAtomA
UnhandledExceptionFilter
GetEnvironmentStringsW
GetCPInfo
FreeEnvironmentStringsA
WriteFile
EnumResourceLanguagesA
GetEnvironmentStrings
GetNumberFormatA
FreeEnvironmentStringsW
GetOEMCP
GetStartupInfoA
SetUnhandledExceptionFilter

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

GetDlgItem
DestroyWindow
IsWindow
EnumChildWindows
SendMessageA
CreateWindowExW
GetWindowThreadProcessId

iphlpapi

GetIpAddrTable

Sections

.text
Size: 902KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 989KB - Virtual size: 989KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ