fe394925e5b4175238a536bc3a4ba7c1_JaffaCakes118

General

Target

fe394925e5b4175238a536bc3a4ba7c1_JaffaCakes118
Size

184KB
MD5

fe394925e5b4175238a536bc3a4ba7c1
SHA1

e3fb230fc1e5ba65ac4b2fc7b238b2dd7af17929
SHA256

4d742321425e275185847a05e052e7a163615d2b2d25eaf5e418133a6c4fe715
SHA512

8cd5f4fcadd85a1ee7e0d56a57cc321f6290302a508319f20afd1351b445eceb52db2a5118827640c9a9f7ca3fb7718d26e966140ec608688b201de919684bd9
SSDEEP

3072:RgNUlyQrT2GI2o0tUvJKj4QajGarN6ggjZ5LAqRWBxz0W3IYsxFs:2sCGNzmvk4nHrNngjZ5Re3IvxFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe394925e5b4175238a536bc3a4ba7c1_JaffaCakes118

Files

fe394925e5b4175238a536bc3a4ba7c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eac1c1464753a48162fa91fe9df0bbaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

StrCmpNIA
StrStrA

shell32

SHGetFolderPathW

kernel32

GetSystemTime
GetSystemInfo
LockResource
DisableThreadLibraryCalls
ReleaseSemaphore
FreeLibrary
AddAtomA
GetProcessHeap
CreateSemaphoreA
EnterCriticalSection
GetModuleFileNameA
InterlockedDecrement
GetCurrentThread
WideCharToMultiByte
GlobalAlloc
GetLastError
GetThreadPriority
GetProcAddress
WaitForMultipleObjects
VirtualAlloc
IsBadWritePtr
GetTickCount
CreateFileW
Sleep
LoadLibraryA
ResetEvent
EnumResourceTypesA
LoadResource
QueryPerformanceCounter
IsBadReadPtr
VirtualFree
MultiByteToWideChar
GetPrivateProfileStructA
TerminateThread
GetExitCodeThread
LeaveCriticalSection
lstrlenA
FindResourceA
HeapFree
GetCurrentThreadId
ReleaseMutex
LoadLibraryW
SetThreadPriority
CreateMutexA
InterlockedIncrement
GetModuleFileNameW
GetCurrentProcessId
ExitProcess

Sections

.text
Size: 93KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

eac1c1464753a48162fa91fe9df0bbaf

Headers

File Characteristics

Imports

setupapi

iphlpapi

newdev

shlwapi

shell32

kernel32

Sections

.text Size: 93KB - Virtual size: 236KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 88KB - Virtual size: 87KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 236KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 88KB - Virtual size: 87KB

.rsrc
Size: 512B - Virtual size: 4KB