18529fa82035e0ada206b293caff1f46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18529fa82035e0ada206b293caff1f46_JaffaCakes118
Size

393KB
MD5

18529fa82035e0ada206b293caff1f46
SHA1

350042ba306b71ce7a9f619c704694f812320c79
SHA256

8993ae96ed5b0c28248e7a0c6915d76dacaf6e4070126aa95c1a168c9d8b34a3
SHA512

3025f38a0808bf706b872d37b5a04b85c0177b87ed2029b024790d08b8f36cb3df4608e2e907c2ee1f03859dffcbec02742d5c60cd73249f12cd9e18808e4021
SSDEEP

6144:tk4i1vUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7cwk:tXSvULyjQorymC/aWYuosit3ZaoIDa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18529fa82035e0ada206b293caff1f46_JaffaCakes118

Files

18529fa82035e0ada206b293caff1f46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4858b47ea4190a7b86406e9db22957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetModuleHandleA
LocalLock
Sleep
FindAtomA
CloseHandle
CreateFileA
GlobalUnlock
LoadLibraryExA
GetConsoleCP
GetACP
LocalFree
FindClose
GetConsoleAliasW
CreateFileMappingA
GetCalendarInfoA
FreeEnvironmentStringsA
GetLastError
HeapCreate
WaitForMultipleObjects

user32

GetDlgItem
SetFocus
IsWindow
GetDC
CheckRadioButton
DispatchMessageA
DrawTextA
GetIconInfo
FillRect
CopyRect
CallWindowProcA
DefWindowProcW
DrawEdge
MessageBoxA

setupapi

CM_Add_IDA
CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ