03aa98fe47e5f9a04b610b2467ab2a55_JaffaCakes118 | Triage

Sharing

General

Target

03aa98fe47e5f9a04b610b2467ab2a55_JaffaCakes118
Size

393KB
MD5

03aa98fe47e5f9a04b610b2467ab2a55
SHA1

6304e4ac67d192999b03ae5423204f16b664e9ea
SHA256

1c5cd57f5033a05f0834534f4cac8e6e6ae2eb56b65a4fbc3dd8543233fb764a
SHA512

5d2ea0eb098b08322ce0b7a77c403703281c11e7620dd69f93f94657bfd528ee4950f66b63dc975ae0918a41c1fc9527b9168c99a5ef74fedc2e32f969265353
SSDEEP

6144:dr+4i1vUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7cZ:dBSvULyjQorymC/aWYuosit3ZaoIDa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03aa98fe47e5f9a04b610b2467ab2a55_JaffaCakes118

Files

03aa98fe47e5f9a04b610b2467ab2a55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4858b47ea4190a7b86406e9db22957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetModuleHandleA
LocalLock
Sleep
FindAtomA
CloseHandle
CreateFileA
GlobalUnlock
LoadLibraryExA
GetConsoleCP
GetACP
LocalFree
FindClose
GetConsoleAliasW
CreateFileMappingA
GetCalendarInfoA
FreeEnvironmentStringsA
GetLastError
HeapCreate
WaitForMultipleObjects

user32

GetDlgItem
SetFocus
IsWindow
GetDC
CheckRadioButton
DispatchMessageA
DrawTextA
GetIconInfo
FillRect
CopyRect
CallWindowProcA
DefWindowProcW
DrawEdge
MessageBoxA

setupapi

CM_Add_IDA
CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ