f6c1a8b6fa709755f31659605667592c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c1a8b6fa709755f31659605667592c_JaffaCakes118
Size

392KB
MD5

f6c1a8b6fa709755f31659605667592c
SHA1

e453b9f97dcaf4a0ccfd5bbf25775f7c3fdf78d4
SHA256

b72ee65619d41b661edc75bfba71276062f976142d3a72060c32865e6ecde264
SHA512

05e1a01d03f9446b488e914dfc86e7584498ff9f2f19d127e153f12cef830ececaa225939e6095710c6d0fbae02eb61231ed342ca5d6a53348bd8ccc6f3b0a76
SSDEEP

12288:Kd5sTH4JGqud/+GyVod/A0RIhKcGicLoM:Kd5SSBGyVITRIhKz1Lh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6c1a8b6fa709755f31659605667592c_JaffaCakes118

Files

f6c1a8b6fa709755f31659605667592c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3711b6eb8c5e06d0eee886f908d69e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
GetCommandLineW
GetTickCount
CreateProcessA
LoadLibraryExA
lstrlenA
CloseHandle
GetModuleHandleA
CreateFileA
SetLastError
GetComputerNameA
CreateThread
LocalUnlock
HeapCreate
GetCurrentDirectoryA
UnmapViewOfFile
GetSystemTime
LocalFree
PulseEvent
Sleep

user32

SetFocus
CheckRadioButton
GetKeyState
GetDlgItem
FillRect
CreateWindowExA
CallWindowProcA
GetScrollBarInfo
DrawMenuBar
GetDC
DispatchMessageA
DrawEdge
IsWindow

clbcatq

SetupOpen
DllGetClassObject
CheckMemoryGates
SetSetupSave
ComPlusMigrate

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ