1a9674a00a381b370ed36c126e0b7a9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a9674a00a381b370ed36c126e0b7a9b_JaffaCakes118
Size

56KB
MD5

1a9674a00a381b370ed36c126e0b7a9b
SHA1

aba2aeacb97644faa2a4cedb06d272a10b7bb154
SHA256

e331d2a60594a187eaf4144fc4890cbda6ed7e224dd75a4969de5e1a6b424cc3
SHA512

0ab21028461a5c1feb921a53b1374026a2f283a76d29b19271557618eb978709033bf6807cc41b97f550be5e3ff03c1db563446645d8cfa125a2288b277eb5f5
SSDEEP

1536:mu7LnourWysb7EEBPbuwUyUkrNpSMqdYbeKpvV8nC+Bq+7V:maLnourWysb7EEBPbuwUyUkbXqdYCqvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a9674a00a381b370ed36c126e0b7a9b_JaffaCakes118

Files

1a9674a00a381b370ed36c126e0b7a9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff05b0b588e9d9b4cc57b3b85fd32529

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
LoadLibraryExA
FreeEnvironmentStringsA
HeapCreate
FindAtomA
CreateFileMappingA
LocalFree
LocalLock
CreateFileA
GetACP
CloseHandle
GetModuleHandleA
FindClose
GetLastError
GetConsoleCP
TlsGetValue
WaitForMultipleObjects
GetConsoleAliasA
Sleep
GlobalUnlock

user32

DefWindowProcA
GetDC
CallWindowProcA
DispatchMessageA
FillRect
DrawEdge
CheckRadioButton
GetIconInfo
CascadeWindows
GetDlgItem
SetFocus
IsWindow
DrawTextA
MessageBoxA

setupapi

CMP_Report_LogOn
CM_Add_Range
CM_Add_IDA
SetupCloseInfFile
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ