18f582f8d72c51f84a7a1dfa2a5991a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18f582f8d72c51f84a7a1dfa2a5991a7_JaffaCakes118
Size

299KB
MD5

18f582f8d72c51f84a7a1dfa2a5991a7
SHA1

59c48febb66ef26310f4a3a41873ce1b952e9067
SHA256

e3dd1495913e428db9d84b2a139bfb4dbe4ec26b61f85b7996299db8946d8c04
SHA512

326f16c43e855392e0049fba34a6eedfa9fd6805b100a9c59c650ef8cae6383cbf62ba8a8fa308cf2046afafeb9f5057b549e250a5e72b03bfbb42a537ab515a
SSDEEP

6144:yRTR28SlcDGKMZlLz/qTbZsT2sPnaT5wqcTaHqscj3gHVqdFX:sRhSlFK03NT2sfa9w3scEHMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f582f8d72c51f84a7a1dfa2a5991a7_JaffaCakes118

Files

18f582f8d72c51f84a7a1dfa2a5991a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6408a26e73f91f9a99d31c9f64312472

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetTickCount
LocalFree
GetConsoleTitleA
CloseHandle
CreateThread
GetCurrentDirectoryA
lstrlenA
LocalUnlock
UnmapViewOfFile
HeapCreate
GetComputerNameA
GetSystemTime
SetEvent
SetLastError
GetCommandLineW
Sleep
LoadLibraryW
GetModuleHandleA
PulseEvent

user32

IsWindow
CheckRadioButton
GetKeyState
CreateWindowExA
GetScrollBarInfo
SetFocus
GetDC
FillRect
DrawEdge
DrawMenuBar
CallWindowProcA
DispatchMessageA
GetDlgItem

clbcatq

DowngradeAPL
SetupOpen
SetSetupOpen
UpdateFromAppChange
CheckMemoryGates

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ