0f31c15f68f9bf7acd95d4808990f11c_JaffaCakes118 | Triage

Sharing

General

Target

0f31c15f68f9bf7acd95d4808990f11c_JaffaCakes118
Size

172KB
MD5

0f31c15f68f9bf7acd95d4808990f11c
SHA1

d535c67a6938c2baef9a2e495bceb0f71c762622
SHA256

6161fdcd2661f9efc02f4a59e8f3ef25853d6a10b618e9acca6d0a5cb9a3e70d
SHA512

aa726e1fd1baa8cc8e774b2be9ef99174d176dc76737134e08449b152e1fe6f9baa8f87eacd25877326545169d70b6918b387aabddb3bbb1c6e9e7471cd2b575
SSDEEP

3072:IUWU+9KHAF7i873mvGgUrjjC27P1mPqcdw2f1M+S3oMdT//0cYdL7yetlp:nWUWKgV3WJqb7PMHdpEoMdYFvJtr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f31c15f68f9bf7acd95d4808990f11c_JaffaCakes118

Files

0f31c15f68f9bf7acd95d4808990f11c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

514c078e1b1f9bd3515888f9a39ff84c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA
sndPlaySoundA

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GlobalAddAtomW
OutputDebugStringA
GetTempPathA
SetEvent
ResetEvent
InitializeCriticalSection
LoadLibraryA
GetFullPathNameW
WaitForSingleObject
Sleep
FileTimeToSystemTime
GetProcAddress
IsDBCSLeadByte
EnumResourceNamesA
VerLanguageNameA
lstrcpyA
DeleteCriticalSection
GetFullPathNameA
LeaveCriticalSection
CreateThread
GetTickCount
GetTimeZoneInformation
EnterCriticalSection
LoadLibraryW
FreeLibrary

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ