15a8c869e5638615e27b87b843de12a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a8c869e5638615e27b87b843de12a3_JaffaCakes118
Size

396KB
MD5

15a8c869e5638615e27b87b843de12a3
SHA1

40d172601b79d2e2cb7e72291761f5154f73d7a0
SHA256

cf39b12fda5021d0da3a8328a0a28cec3ad6853d4e825e05467c46467fe9e3c1
SHA512

b45d2ca1a7fd8a81b8d66ab4f3636d8f10f22308e19eca06ff524a25db0fb24271fc9bc6625ca660abdf2e5cc57dc3b4e37fbc8b733f309e8b3d1d4be7448f5b
SSDEEP

6144:2PjMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCDjl8:WrBxsptlK8D2JPHcGHXWVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a8c869e5638615e27b87b843de12a3_JaffaCakes118

Files

15a8c869e5638615e27b87b843de12a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81c17946f644894486bae772ff76557f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GlobalUnlock
UnmapViewOfFile
LoadLibraryW
CreateThread
GetComputerNameA
CreateFileW
GetCommandLineW
PulseEvent
GetSystemTime
ResetEvent
CloseHandle
HeapCreate
LocalFree
GetCurrentDirectoryA
lstrlenA
lstrcpyA
FindClose
GetModuleHandleA
Sleep

user32

FillRect
DrawMenuBar
CreateWindowExA
GetDC
SetFocus
GetCaretPos
DrawEdge
IsWindow
DispatchMessageA
GetDlgItem
CreateIcon
CheckRadioButton
CallWindowProcA

cryptui

WizardFree
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
LocalEnroll
CryptUIDlgSelectCA

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ