JaffaCakes118_68eb8aae37c33d27b7736657ce62e960 | Triage

Sharing

General

Target

JaffaCakes118_68eb8aae37c33d27b7736657ce62e960
Size

169KB
MD5

68eb8aae37c33d27b7736657ce62e960
SHA1

d25336493fa499b08f876a3152248d5323fa4ec3
SHA256

ff59fd39f343ff759158ea1edd02ba2a068ecf0b5a458813c6cd581c239e17c0
SHA512

141378a593d771e8a0056d32249c1eccca7b54c0a4ad8c158ee1f8069d01609375bef90ae4b67b2f6057fa53ba38c97c3180b548346179233a2e35b8c26337b0
SSDEEP

3072:yDVJI8SxZxU+b2EhfhfI8PTjYZ12Ze2ueo8CdQ6cuDI+WR+W2aXroUMKp+iGKpM:yDnIJZxU+hhfhA8PoZGueZC3D279MKtZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_68eb8aae37c33d27b7736657ce62e960

Files

JaffaCakes118_68eb8aae37c33d27b7736657ce62e960
.exe windows:4 windows x86 arch:x86

840579aa01ed8ec443be3cc327038d77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

AddAtomA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
GetOEMCP
EnumResourceLanguagesA
FreeEnvironmentStringsA
GetNumberFormatA
UnhandledExceptionFilter
GetStartupInfoA
GetCPInfo
SetUnhandledExceptionFilter

user32

GetDlgItem
SendMessageA
CreateWindowExW
DestroyWindow
IsWindow
EnumChildWindows
GetWindowThreadProcessId

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 89KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ