JaffaCakes118_8c450ef4b459456b4b037dbb321619a5

General

Target

JaffaCakes118_8c450ef4b459456b4b037dbb321619a5
Size

1.9MB
MD5

8c450ef4b459456b4b037dbb321619a5
SHA1

3a84b8c946a16accb03cb173c87ab465fbbd1194
SHA256

4e398a335174371bee9882621b81bef435d9b8c013bd934b9f2f956703b8c7be
SHA512

8a11f93a2bf39272c7e768ff636a36a4faa2d424aad6588b59d188355e23627a2107fb58f77f5520caeed48138b0683d6397951426c6e0aaedcae42c6986558e
SSDEEP

49152:ydOjNXMu8VaWg/IbwsYRxUGXET3pbjX6JyytOdsi3:IOjtMaWZUxUfT35X06si

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8c450ef4b459456b4b037dbb321619a5

Files

JaffaCakes118_8c450ef4b459456b4b037dbb321619a5
.exe windows:4 windows x86 arch:x86

50f94afb49f5c15d3c767fff42cac8f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

iphlpapi

GetIpAddrTable

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

shlwapi

StrCmpNIA
StrStrA

kernel32

LeaveCriticalSection
LockResource
SetThreadPriority
EnterCriticalSection
WaitForMultipleObjects
VirtualAlloc
AddAtomA
CreateFileW
GetModuleFileNameA
GetExitCodeThread
GetLastError
GetCurrentThread
GlobalAlloc
GetTickCount
CreateSemaphoreA
GetSystemTime
GetCurrentThreadId
InterlockedIncrement
VirtualFree
LoadLibraryA
HeapFree
GetProcessHeap
FreeLibrary
EnumResourceTypesA
WideCharToMultiByte
ReleaseSemaphore
GetProcAddress
TerminateThread
DisableThreadLibraryCalls
GetModuleFileNameW
GetCurrentProcessId
FindResourceA
ResetEvent
Sleep
CreateMutexA
lstrlenA
QueryPerformanceCounter
GetPrivateProfileStructA
LoadLibraryW
IsBadReadPtr
InterlockedDecrement
GetThreadPriority
GetSystemInfo
IsBadWritePtr
ReleaseMutex
MultiByteToWideChar
LoadResource
ExitProcess

Sections

.text
Size: 903KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1021KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50f94afb49f5c15d3c767fff42cac8f1

Headers

File Characteristics

Imports

shell32

newdev

iphlpapi

setupapi

shlwapi

kernel32

Sections

.text Size: 903KB - Virtual size: 4.1MB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1021KB - Virtual size: 1020KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 903KB - Virtual size: 4.1MB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1021KB - Virtual size: 1020KB

.rsrc
Size: 512B - Virtual size: 4KB