02d15560f22fe4642f3dab2cf3b8b9c4_JaffaCakes118 | Triage

Sharing

General

Target

02d15560f22fe4642f3dab2cf3b8b9c4_JaffaCakes118
Size

393KB
MD5

02d15560f22fe4642f3dab2cf3b8b9c4
SHA1

91738536422a98ba3f642421ffc1a39aff68e2c3
SHA256

ecc0f053366f517ab4b0718ea23ace3d98c238bfd245e20cba3755f813afb6de
SHA512

a5a5091f90d3d9a8ac340ea8f134068342f30531b8d0bb60c6e451efeb3108ab9850a8eca802c337bd03d52b894715f532d9ac5f1888dd87e32064ceccca6f48
SSDEEP

6144:VBUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7qP8G:/vULyjQorymC/aWYuosit3Zao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02d15560f22fe4642f3dab2cf3b8b9c4_JaffaCakes118

Files

02d15560f22fe4642f3dab2cf3b8b9c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9cf807e5272c04910f4bd5a1851a67d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
Sleep
HeapCreate
LocalFree
GetACP
WaitForMultipleObjects
FindClose
GetModuleHandleA
CreateFileMappingA
TlsGetValue
LoadLibraryExA
GetConsoleAliasW
FindAtomA
GlobalUnlock
LocalLock
GetCalendarInfoA
CloseHandle
GetLastError

user32

FillRect
DrawEdge
IsWindow
GetDlgItem
SetFocus
DrawTextA
DispatchMessageA
DefWindowProcW
CheckRadioButton
GetIconInfo
CallWindowProcA
GetDC
CopyRect
MessageBoxA

setupapi

CM_Add_IDA
SetupCloseInfFile
CM_Add_Range
SetupCloseLog
CMP_Report_LogOn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ