18479a347305cf7aecff5000d29c87fe_JaffaCakes118 | Triage

Sharing

General

Target

18479a347305cf7aecff5000d29c87fe_JaffaCakes118
Size

346KB
MD5

18479a347305cf7aecff5000d29c87fe
SHA1

5e70573f3f4e073762be413ec72e4749e7918382
SHA256

fe8e41bb78db5b248ed72e71bd511519dabc6ff3e94500ac9b649382914f26e1
SHA512

f4dc8e7ecca1383e7c2010905f6fa3e0e069e464d784a425578f086ae473d0c91b54d4fa9b70579a1facb825b5208423101dc4f478e54a1d6325c295302efcdd
SSDEEP

6144:K1rybcXrrLi3ldWsVej58Hka+DWVJfDuZ/hSYDi6qlDr7Ie3w8Up:CrE220yzNJf4UhF7Ie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18479a347305cf7aecff5000d29c87fe_JaffaCakes118

Files

18479a347305cf7aecff5000d29c87fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9238ac4f6345caa07edea84ea31dc05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
CloseHandle
CreateFileW
GetModuleHandleA
ResetEvent
FindClose
GetCommandLineW
LocalFree
CreateThread
lstrlenA
UnmapViewOfFile
PulseEvent
GetTickCount
LoadLibraryW
Sleep
GetComputerNameA
GetCurrentDirectoryA
lstrcpyA
GetSystemTime
HeapCreate

user32

DispatchMessageA
CheckRadioButton
FillRect
GetKeyState
DrawMenuBar
CreateWindowExA
GetDlgItem
SetFocus
DrawEdge
IsWindow
GetScrollBarInfo
CallWindowProcA
GetDC

cryptui

CryptUIDlgCertMgr
LocalEnroll
CryptUIDlgSelectCA
WizardFree
CryptUIDlgSelectStoreA

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ