2186c02e942a31ef8bd30c4f9fcf83ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2186c02e942a31ef8bd30c4f9fcf83ae_JaffaCakes118
Size

187KB
MD5

2186c02e942a31ef8bd30c4f9fcf83ae
SHA1

03965c98a3eab4abdbd8c4fb6d6ed27d0063df10
SHA256

c31eab5e55c519d7191c63a38b286f15ebdf75f6d40690fc3eef2d0ca5c0f4c2
SHA512

0e6831de9b87a9896bfe0ed1ca489d8f8e8a66edc9786787b424adaae974b32702508f00a8d51dea350ff46529852e9b46e553cfc701755c384713d940991165
SSDEEP

3072:WzV5ghpaEYoLalzMhD+xacVqICG4K+WF9ITuZf+P2mTAnwaHbZLS+wlVfBgP52Ni:U5ghpBZGMVsacVqdGpICoVUwa7r4H0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2186c02e942a31ef8bd30c4f9fcf83ae_JaffaCakes118

Files

2186c02e942a31ef8bd30c4f9fcf83ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0787bf7b247e38aac0a7d1d6dce3d26f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

winmm

mciSendCommandA
sndPlaySoundA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

shlwapi

PathAddBackslashA

kernel32

GlobalAddAtomW
OutputDebugStringA
SetEvent
GetTickCount
IsDBCSLeadByte
WaitForSingleObject
GetTimeZoneInformation
DeleteCriticalSection
ResetEvent
Sleep
GetProcAddress
EnumResourceNamesA
InitializeCriticalSection
FileTimeToSystemTime
LoadLibraryA
GetTempPathA
VerLanguageNameA
lstrcpyA
CreateThread
LeaveCriticalSection
GetFullPathNameA
EnterCriticalSection
LoadLibraryW
GetFullPathNameW
FreeLibrary

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ