0e67b169f1f26108a3b07435e10063cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e67b169f1f26108a3b07435e10063cb_JaffaCakes118
Size

171KB
MD5

0e67b169f1f26108a3b07435e10063cb
SHA1

2322fa325188e62adeece3623d754576f02ae086
SHA256

25db1e7d5872016461194ddd9bbca309eeb3c7f4991f76461cf8dae0de204c0e
SHA512

1d5eb032929f8efa8af2459e460af25cd0db6a414a938a89ad35b02a5b31cbbb75d781d133fc1617d993f8a1ef6b3272469d0bfecd006a0ead172125b023c02f
SSDEEP

3072:7gSZzT+GHeyKvN9Ufn2ixh+vy13ZIxTOyV3zQVBKo5k05o8770/7:plTjtfr5dKxTOyVDATym7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e67b169f1f26108a3b07435e10063cb_JaffaCakes118

Files

0e67b169f1f26108a3b07435e10063cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a51ae054c5ebc02c1a3a07bf659c1413

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameW
ResetEvent
GetProcAddress
EnterCriticalSection
GetFullPathNameA
LeaveCriticalSection
SetEvent
OutputDebugStringA
IsDBCSLeadByte
InitializeCriticalSection
GetFullPathNameW
lstrcpyA
Sleep
EnumResourceNamesA
GetTempPathA
CreateThread
QueryMemoryResourceNotification
LoadLibraryW
FileTimeToSystemTime
GetTickCount
LoadLibraryA
GetTimeZoneInformation
WaitForSingleObject
DeleteCriticalSection
FreeLibrary

winmm

mciSendCommandA
sndPlaySoundA

shlwapi

PathAddBackslashA

msimg32

AlphaBlend
TransparentBlt

setupapi

InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ