efe5a4dc47a3973279f70e844233de67_JaffaCakes118

General

Target

efe5a4dc47a3973279f70e844233de67_JaffaCakes118
Size

169KB
MD5

efe5a4dc47a3973279f70e844233de67
SHA1

14deca72174952578ceabb767f58f5ac6dadb638
SHA256

6c1756aa530b36cac92d6ddcd49b9bc2b4b3b72ee86db90963a426c13257fae1
SHA512

f0bd44b4bf10f714b49dc6d8ed675268b3f8ec135b87abfc0887b4bda444d32fea9635c8b9b3a656edf9a304922be82543ec5de2e9e0313e0c5a0f7dca1f0b51
SSDEEP

3072:3YGy9/koA4KzeRZtDb6n7MckPJHgqH9OZxG8YT1jKbvwuCXhgbGtV4tNIHlol49b:oGyNkh8HDEGxgrxpYTNLGtNIul49qSMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe5a4dc47a3973279f70e844233de67_JaffaCakes118

Files

efe5a4dc47a3973279f70e844233de67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

717cca396c6459df943334b992b50608

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

kernel32

SetThreadPriority
VirtualAlloc
IsBadReadPtr
GetCurrentProcessId
CreateMutexA
GlobalAlloc
Sleep
LockResource
AddAtomA
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
CreateFileW
CreateSemaphoreA
InterlockedIncrement
LoadLibraryA
GetSystemTime
GetProcAddress
WaitForMultipleObjects
GetModuleFileNameA
LoadResource
GetProcessHeap
IsBadWritePtr
VirtualFree
ResetEvent
LoadLibraryW
ReleaseSemaphore
EnumResourceTypesW
GetThreadPriority
TerminateThread
QueryPerformanceCounter
GetSystemInfo
HeapFree
GetCurrentThreadId
GetGeoInfoA
GetExitCodeThread
GetLastError
ReleaseMutex
MultiByteToWideChar
InterlockedDecrement
GetTickCount
FreeLibrary
lstrlenA
FindResourceA
WideCharToMultiByte
GetCurrentThread
DisableThreadLibraryCalls
ExitProcess

newdev

UpdateDriverForPlugAndPlayDevicesW

iphlpapi

GetIpAddrTable

shlwapi

StrCmpNIA
StrStrA

setupapi

CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 86KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

717cca396c6459df943334b992b50608

Headers

File Characteristics

Imports

shell32

kernel32

newdev

iphlpapi

shlwapi

setupapi

Sections

.text Size: 86KB - Virtual size: 485KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 80KB - Virtual size: 79KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 86KB - Virtual size: 485KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 512B - Virtual size: 4KB