ea4e3607e3f3ed0a66c5b3baf1662add_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea4e3607e3f3ed0a66c5b3baf1662add_JaffaCakes118
Size

299KB
MD5

ea4e3607e3f3ed0a66c5b3baf1662add
SHA1

760696ef8387696384c26a0e339e35332d081fd7
SHA256

45be6e26a79bfd4e11d0ebf0a85bfa45de8e0fac343d189a393bf103a3911d2d
SHA512

d4ca5e30fbc8819ae099dceb076848c46c61e87cd5e6d6a3fe2b8584bbe2156eca41b756e95f7081a17cc9a325e1ce53e8067dc779f9f967a2f5a8e394d6e793
SSDEEP

6144:N/yqjBhuwIIOfyFYZkNQ3A91ZbW6dUuCixdGodwwhQ:NqqjrPWSbHZbWCpxdp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea4e3607e3f3ed0a66c5b3baf1662add_JaffaCakes118

Files

ea4e3607e3f3ed0a66c5b3baf1662add_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c11faaab0c80ae442fe292f8acbb0dec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetSystemTime
SetLastError
FindVolumeClose
GetTimeFormatW
ResetEvent
CreateThread
CreateFileA
LocalUnlock
LoadLibraryExW
GetTickCount
GetModuleHandleA
GetComputerNameA
UnmapViewOfFile
lstrlenA
LocalFree
GetCommandLineW
GetCurrentDirectoryW
Sleep
CloseHandle

user32

SetFocus
FillRect
GetDC
CheckRadioButton
DrawEdge
DrawMenuBar
IsWindow
CallWindowProcA
DispatchMessageA
GetDlgItem
CreateWindowExA
GetKeyState
GetComboBoxInfo

cryptui

CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
LocalEnroll
WizardFree
CryptUIDlgSelectCA

hdwwiz.cpl

AddHardwareWizard

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ