0d36e1bacc3157e4ee716e65cfe171dd_JaffaCakes118 | Triage

Sharing

General

Target

0d36e1bacc3157e4ee716e65cfe171dd_JaffaCakes118
Size

375KB
MD5

0d36e1bacc3157e4ee716e65cfe171dd
SHA1

7df01b9d33ab13523fe2810c5a31d392e1c1e0a2
SHA256

acdebb239971eb2b704d562f7c159592fd2ba940f2f83a227a6d119c1c3c7982
SHA512

33c771b2ad6822bddd75765bd2f497841df35002a857bf1b2f4793cd4846fd05cbcab158873ed4c0aecd68b6a46b30fc7e5ef4cc81ce5b00906dc647bd59e771
SSDEEP

6144:KTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOlpxqR:K/snlM/jzTAV/3alqvU84xRXmY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d36e1bacc3157e4ee716e65cfe171dd_JaffaCakes118

Files

0d36e1bacc3157e4ee716e65cfe171dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61eb6da955e9513b33a758606707438a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CloseHandle
GetComputerNameA
GetModuleHandleA
FindClose
GetSystemTime
CreateFileW
GetCommandLineW
ResetEvent
GlobalUnlock
UnmapViewOfFile
lstrcatA
CreateThread
GetCurrentDirectoryA
GetTickCount
Sleep
PulseEvent
HeapCreate
LocalFree
LoadLibraryW

user32

FillRect
CheckRadioButton
DrawEdge
IsWindow
GetKeyState
GetDlgItem
GetDC
DrawMenuBar
GetScrollBarInfo
CallWindowProcA
SetFocus
CreateWindowExA
DispatchMessageA

clbcatq

SetupOpen
DowngradeAPL
CheckMemoryGates
UpdateFromAppChange
SetSetupOpen

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ