1900ab6fb13db94caa596b4735286543_JaffaCakes118 | Triage

Sharing

General

Target

1900ab6fb13db94caa596b4735286543_JaffaCakes118
Size

393KB
MD5

1900ab6fb13db94caa596b4735286543
SHA1

d350d86343a82bf03580b3711f74ccc2587a094d
SHA256

c50942aa8ac7143eec393290e59f065b4f986d297b57e818a97256fab7356428
SHA512

275a210fe41a87b2b40219dbcab3da185f048ae668aee60d9247ed1305c0fe96f12ee3dd4fbce5e737e2b5995c1e2908d8336ccf75552754a70f4f6807a7db04
SSDEEP

6144:Qxg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7924J:+g7dUmmLen1G6Lkjr7plWzuDRsVq17t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1900ab6fb13db94caa596b4735286543_JaffaCakes118

Files

1900ab6fb13db94caa596b4735286543_JaffaCakes118
.exe windows:4 windows x86 arch:x86

081e4aa261b112d416b3ec5a8b8d45e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
LocalFree
GetConsoleAliasA
HeapCreate
FindClose
GetModuleHandleA
GetConsoleCP
CreateFileMappingA
GlobalUnlock
GetCalendarInfoA
CloseHandle
LocalLock
FreeEnvironmentStringsA
GetACP
TlsGetValue
GetLastError
FindAtomA
CreateFileA
Sleep
WaitForMultipleObjects

user32

DrawEdge
SetFocus
DispatchMessageA
FillRect
GetDC
CheckRadioButton
GetDlgItem
CascadeWindows
DefWindowProcA
CallWindowProcA
DrawTextA
GetIconInfo
IsWindow
MessageBoxA

setupapi

CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA
SetupCloseLog
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ