f9b72d0676f62fa2e80604b5df9c4cb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9b72d0676f62fa2e80604b5df9c4cb2_JaffaCakes118
Size

393KB
MD5

f9b72d0676f62fa2e80604b5df9c4cb2
SHA1

f462f26cd332141f5a663b9c9d582b390ff14b61
SHA256

8e9e06a6eea92bcc5e9eb6918809a3317bde165ceff5c0b244c08f6f69b19890
SHA512

0d3771acb9ee431389fa29d1b7e719a4a51ccc83767824869e7c0d93f5a760b04056b0f25ffcc289e89e770dfefa9727bf1db14086d0796c0a256030fca9ee84
SSDEEP

12288:nyg7dUmmLen1G6Lkjr7plWzuDRsVqpHqt:yg7dkenE6Qf7fpuGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9b72d0676f62fa2e80604b5df9c4cb2_JaffaCakes118

Files

f9b72d0676f62fa2e80604b5df9c4cb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7080018158c980244ff2fc0fd9c66951

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
LocalFree
LoadLibraryExA
GetLastError
CreateFileA
GetConsoleCP
CreateFileMappingA
WaitForMultipleObjects
GetModuleHandleA
GetConsoleAliasA
GlobalUnlock
FindAtomA
LocalLock
HeapCreate
FindClose
TlsGetValue
CloseHandle
Sleep
GetACP
FreeEnvironmentStringsA

user32

GetIconInfo
CallWindowProcA
DefWindowProcA
IsWindow
CheckRadioButton
CascadeWindows
FillRect
DrawTextA
SetFocus
GetDlgItem
DispatchMessageA
DrawEdge
GetDC
MessageBoxA

setupapi

SetupCloseLog
SetupCloseInfFile
CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ