0f3bd40d639e29ad382cf9e763321ada_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f3bd40d639e29ad382cf9e763321ada_JaffaCakes118
Size

815KB
MD5

0f3bd40d639e29ad382cf9e763321ada
SHA1

73366a9d69b0ac2924dc6a846e56d4db70a4ca40
SHA256

51c3b3c2d83969a81894957905d0093fbb9bc0eff1553df74af71353548c2aa6
SHA512

ce24cedf3179511eb4bca2c36fc0241b69c8cdd09a9f848a6bb36ce5a0223614e75221913eaf8e32050aa7cde0d64c4d415393cf786127963910e09965e38f6c
SSDEEP

24576:Q3AQt/4RaUqI3/DVHVbc+I1GUGQyYQfvF3ljv:QhAR1qIbVHC+I4UG1vFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3bd40d639e29ad382cf9e763321ada_JaffaCakes118

Files

0f3bd40d639e29ad382cf9e763321ada_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69d96f03e37f590dbcf280d6437ebba1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
GetACP
FindAtomA
Sleep
GetCalendarInfoA
GetModuleHandleA
WaitForMultipleObjects
CreateFileA
CloseHandle
FindClose
GlobalUnlock
GetLastError
TlsGetValue
CreateFileMappingA
HeapCreate
LocalFree
GetConsoleCP
LoadLibraryExA
FreeEnvironmentStringsA
LocalLock

user32

DefWindowProcA
IsWindow
CallWindowProcA
GetDC
CheckRadioButton
CascadeWindows
GetDlgItem
DispatchMessageA
FillRect
DrawTextA
DrawEdge
GetIconInfo
SetFocus
MessageBoxA

setupapi

SetupCloseInfFile
CMP_Report_LogOn
CM_Add_Range
CM_Add_IDA
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ