f33c1c98fd0f2e57a390bf0eee638bcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f33c1c98fd0f2e57a390bf0eee638bcb_JaffaCakes118
Size

815KB
MD5

f33c1c98fd0f2e57a390bf0eee638bcb
SHA1

75f7ef3331f01b223cf506d174906ae3428449f7
SHA256

cf177667838ebe9f30a9443924a39cd38f2ba616839b393176de9bb75ee5d02d
SHA512

ff9fd30c18db084c87fa47120213dc0159549dfdebd80da8c1a07f485d3b7a60d1b2a73c705f3806b1c2db716144fd0d50ef46479f31363bc6ce2748da344efd
SSDEEP

12288:RSeyJyfU+Dm7eEoa4Ng2RzztwYkV1aoQO6BjK1j/I+tQNcI3YhlmGdny+Vl7WlhG:T6eKc+TQdBjK1j/1tTl7vkLBlhVj783

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f33c1c98fd0f2e57a390bf0eee638bcb_JaffaCakes118

Files

f33c1c98fd0f2e57a390bf0eee638bcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f721a700e36f96e1e6fa6613e81ef1d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetConsoleAliasW
GetConsoleCP
CreateFileMappingA
GetACP
CreateFileA
LoadLibraryExA
GetLastError
CloseHandle
FindAtomA
GlobalUnlock
FreeEnvironmentStringsA
WaitForMultipleObjects
TlsGetValue
Sleep
LocalFree
LocalLock
HeapCreate
GetCalendarInfoA
GetModuleHandleA

user32

DrawTextA
SetFocus
GetDlgItem
GetIconInfo
IsWindow
CheckRadioButton
CopyRect
FillRect
DispatchMessageA
CallWindowProcA
DefWindowProcW
GetDC
DrawEdge
MessageBoxA

setupapi

CM_Add_IDA
SetupCloseInfFile
CM_Add_Range
CMP_Report_LogOn
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ