f40e88cc2cfc9e6721eb19571be0a958_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f40e88cc2cfc9e6721eb19571be0a958_JaffaCakes118
Size

37KB
MD5

f40e88cc2cfc9e6721eb19571be0a958
SHA1

2e3c9b43e9d19704194d1a0f72272e6ee4b34b75
SHA256

c2e7c82250cb101e231143165db5b94286ee551f453f5ee30465eb7f4de07fc6
SHA512

78b7c1ef811e1402db056d53a1c1eb14687a29f2cd6637dcfdb8a215ea80fe926e1f46370dec8f19fecbff551ef03f17f8cf1d0c3ac56f5e88f6560a64c9cfb1
SSDEEP

768:AkPUgLv9cXJpORt73WnAxjnyaOxwRSQawqqckSVtcwsl:A49vCeL73xjn0Qawik2W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f40e88cc2cfc9e6721eb19571be0a958_JaffaCakes118

Files

f40e88cc2cfc9e6721eb19571be0a958_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f652afc34632b53c732667788cb409a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LocalFree
CloseHandle
CreateThread
GetDiskFreeSpaceA
CreateFileA
GetComputerNameA
GetTimeFormatW
LocalUnlock
ResetEvent
GetTickCount
SetLastError
GetCommandLineW
LoadLibraryW
FindVolumeClose
HeapCreate
Sleep
GetSystemTime
lstrlenA
UnmapViewOfFile

user32

GetComboBoxInfo
DispatchMessageA
CheckRadioButton
SetFocus
FillRect
DrawMenuBar
DrawStateA
GetDC
DrawEdge
CallWindowProcA
CreateWindowExA
IsWindow
GetDlgItem

cryptui

WizardFree
CryptUIDlgSelectCA
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr

hdwwiz.cpl

AddHardwareWizard

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ