fa6b32c8095d3a43b4655f7ed2c7f4ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa6b32c8095d3a43b4655f7ed2c7f4ce_JaffaCakes118
Size

187KB
MD5

fa6b32c8095d3a43b4655f7ed2c7f4ce
SHA1

e2db70af447fa8b998e365ab41dd9886df21d841
SHA256

e89291c83181dd698360cd2945377259982fd86eec2413c1b21e31f0de0e08db
SHA512

71272c3b52d9516743c370ff985de8858d1dccea2b2f7621435c3390b0e090cae528f6aab837c84f44f4035580e75f8015802dcb89b4a7913957e948dfc6d1bd
SSDEEP

3072:l2vjHdaoHP8+5uzYbHmpBnAE4rVktA8RPfBETe:SjRk4uz02BnA2NR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa6b32c8095d3a43b4655f7ed2c7f4ce_JaffaCakes118

Files

fa6b32c8095d3a43b4655f7ed2c7f4ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

898d81f21070b191cb39f8a56b1e72b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
LeaveCriticalSection
GlobalAddAtomW
LoadLibraryA
FileTimeToSystemTime
LoadLibraryW
ResetEvent
SetEvent
OutputDebugStringA
GetTickCount
lstrcpyA
GetFullPathNameA
DeleteCriticalSection
EnumResourceNamesA
VerLanguageNameA
IsDBCSLeadByte
GetFullPathNameW
InitializeCriticalSection
WaitForSingleObject
EnterCriticalSection
CreateThread
Sleep
GetTempPathA
GetProcAddress
FreeLibrary

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

winmm

mciSendCommandA
sndPlaySoundA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ