00839561bc2172207f6c37efa8fb30af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00839561bc2172207f6c37efa8fb30af_JaffaCakes118
Size

803KB
MD5

00839561bc2172207f6c37efa8fb30af
SHA1

dca586b4b87be6a5c25a7a0cab08cd8e61a194bb
SHA256

bfa094ccd7dc9635dd87924a3062433f7e18a9597a9d8035663b6b36656f2f57
SHA512

2e9557fd8211d1d6a2bc86da693a4169369c1f037520ce32ede5eaf2fa7f3b04b12fdf5d1f02ecbb040cffd63dc1e45e0b1cc22296090c0909ca64b846d60eb1
SSDEEP

24576:n7+tzoau3Sr/tRC7XeugTq961weiNE1OI/:n7Ozbuir1UJ2x5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00839561bc2172207f6c37efa8fb30af_JaffaCakes118

Files

00839561bc2172207f6c37efa8fb30af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d204417bca271ac5e59a4cb1fed5089

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
UnmapViewOfFile
CloseHandle
ResetEvent
GetCurrentDirectoryA
PulseEvent
lstrlenA
HeapCreate
LoadLibraryW
CreateFileW
GetComputerNameA
GetModuleHandleA
CreateThread
FindClose
LocalFree
GlobalUnlock
lstrcpyA
Sleep
GetCurrentThreadId
GetCommandLineA

user32

CreateIcon
CallWindowProcA
DrawEdge
GetDlgItem
IsWindow
SetFocus
GetCaretPos
CheckRadioButton
DispatchMessageA
GetDC
DrawMenuBar
FillRect
CreateWindowExA

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
LocalEnroll
WizardFree

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 796KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE