f3df0e65f7b257849a9803398f77bb42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3df0e65f7b257849a9803398f77bb42_JaffaCakes118
Size

815KB
MD5

f3df0e65f7b257849a9803398f77bb42
SHA1

20ccbf5b61dba12f56aced14cc3f89081795981b
SHA256

25f37ea41484988791b230329abcbcc34ba1209c0a1c64c5f7e837bf6123b3df
SHA512

89b6fa60a5e0903624472734a0e25774ca9a549c31b60b9bfd445ca794ae4a72774db58f71896ab76fa6e93234c08adccfebb0a6223f9a539c11ce577c14ef18
SSDEEP

24576:Kt86fh2az61aF58+jTJjh7HJCIHQJR2A4yiyPPC0/h:E52avXJh7HAIHC2hXQCmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3df0e65f7b257849a9803398f77bb42_JaffaCakes118

Files

f3df0e65f7b257849a9803398f77bb42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5b0e9a8cb3e9b859364a65178938d71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
FreeEnvironmentStringsA
GetCalendarInfoA
CreateFileA
FindAtomA
Sleep
GetModuleHandleA
GetConsoleAliasW
GlobalUnlock
GetLastError
LocalFree
TlsGetValue
HeapCreate
LocalLock
CreateFileMappingA
WaitForMultipleObjects
GetConsoleCP
GetACP
FindClose
CloseHandle

user32

DrawEdge
CheckRadioButton
IsWindow
DrawTextA
CallWindowProcA
SetFocus
CopyRect
GetIconInfo
FillRect
DispatchMessageA
GetDlgItem
GetDC
DefWindowProcW
MessageBoxA

setupapi

SetupCloseLog
SetupCloseInfFile
CMP_Report_LogOn
CM_Add_Range
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ