JaffaCakes118_cd27376075597826bce6289d3bdc8498 | Triage

Sharing

General

Target

JaffaCakes118_cd27376075597826bce6289d3bdc8498
Size

185KB
MD5

cd27376075597826bce6289d3bdc8498
SHA1

6d08381fa17c246279cb137ffc8e1d3ebac1a50a
SHA256

1fb6596b0cbcee12b5d33f3ce38691e59af5cc96c06e81005989385a46aeea6b
SHA512

1fa179354dbd90daff822ff62ca1d6f64ce34a4bb9487abfa91117b0fde4217707ecd6d9fa534584f0d26bcc2f5b37867e2929d0839e59330d09db90ed7ed88a
SSDEEP

3072:zFkGUUL3oIEbXDuGtIXZ6OPKQmLo7xw87sXAICyEVHd+u8htw:2pULYIE3u8IXZ663mEW8ByWRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_cd27376075597826bce6289d3bdc8498

Files

JaffaCakes118_cd27376075597826bce6289d3bdc8498
.exe windows:4 windows x86 arch:x86

e2f33b5e677fcd59ef6b8e62d5a33409

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

IsWindow
EnumChildWindows
CreateWindowExW
DestroyWindow
SendMessageA
GetDlgItem
GetWindowThreadProcessId

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

kernel32

AddAtomA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStartupInfoA
GetOEMCP
WriteFile
UnhandledExceptionFilter
EnumResourceLanguagesA
FreeEnvironmentStringsA
GetNumberFormatA
GetEnvironmentStringsW
GetCPInfo
SetUnhandledExceptionFilter

Sections

.text
Size: 97KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ