0526d46db0fc4af4a959d5eebbce4c7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0526d46db0fc4af4a959d5eebbce4c7e_JaffaCakes118
Size

173KB
MD5

0526d46db0fc4af4a959d5eebbce4c7e
SHA1

c890228741fafbeb1853e67c2d1aa945f075a4f7
SHA256

d2166fad3a6981ebaa668ac715d7ec33d4c248f7eb311ed84a5c59614da46d9c
SHA512

236d80f315be28a2c5134642a775a8445667be7a115826f9d1da1209c38e1beda9c2110679b5d0c17b614ccc2ecf816c81e6f5d8e376ee82fdfd6bbbdf6fadc0
SSDEEP

3072:CB1c/AS12mIWwNMIlxwQMHF4hOmWKWMHgCyyd+wpq3/XqSy0KBC6VRJjJxuKqV:C7Oz12mvwCEOl4sK1AE+wpq3/PKBC6VQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0526d46db0fc4af4a959d5eebbce4c7e_JaffaCakes118

Files

0526d46db0fc4af4a959d5eebbce4c7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53832ae7347fb1f31f3aa8bd6eacd5ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAddBackslashA

winmm

mciSendCommandA
sndPlaySoundA

kernel32

GetProcAddress
ResetEvent
GlobalAddAtomW
FileTimeToSystemTime
LoadLibraryA
GetFullPathNameA
CreateThread
GetTickCount
WaitForSingleObject
GetFullPathNameW
Sleep
InitializeCriticalSection
EnumResourceNamesA
IsDBCSLeadByte
VerLanguageNameA
SetEvent
GetTempPathA
GetTimeZoneInformation
OutputDebugStringA
lstrcpyA
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryW
EnterCriticalSection
FreeLibrary

msimg32

AlphaBlend
TransparentBlt

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ