0709a9da9a7bf84f06e306b3a293a7e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0709a9da9a7bf84f06e306b3a293a7e7_JaffaCakes118
Size

326KB
MD5

0709a9da9a7bf84f06e306b3a293a7e7
SHA1

ec397b6d28ca660a6596e8b17f1a87c33fb440ad
SHA256

1d99672a81c3e54ddfa175d80808dbf7484c3bb4caf7951029e0d4825b8ddc05
SHA512

aa42172ae3d4f0da3b22300ec1374f3df4b9ab0f0ec95a0a4a9ed10bf28c7ee921eccdb292c0fddeff351236358db0379f1934c585532c86b782cc4bad217d6b
SSDEEP

6144:pqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnrf:PO1xm+QoK0t4K3gCTDYWGrYzt+NST2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0709a9da9a7bf84f06e306b3a293a7e7_JaffaCakes118

Files

0709a9da9a7bf84f06e306b3a293a7e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

078c46742cf75f036ee0f3440351c06d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LoadLibraryW
GetComputerNameA
GetDiskFreeSpaceA
CreateThread
FindVolumeClose
Sleep
GetModuleHandleA
SetLastError
LocalFree
ResetEvent
HeapCreate
GetSystemTime
LocalUnlock
CloseHandle
GetCommandLineW
lstrlenA
GetDateFormatA
CreateFileA
UnmapViewOfFile

user32

IsWindow
GetDC
SetFocus
CheckRadioButton
GetDlgItem
GetComboBoxInfo
DrawStateA
DispatchMessageA
FillRect
DrawEdge
DrawMenuBar
CallWindowProcA
CreateWindowExA

advapi32

IsTokenUntrusted
RegCloseKey
RegDeleteKeyA
FreeSid
RegEnumValueA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ