2235dc58b83f15d5dc6cbdbd7931bc64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2235dc58b83f15d5dc6cbdbd7931bc64_JaffaCakes118
Size

393KB
MD5

2235dc58b83f15d5dc6cbdbd7931bc64
SHA1

e0fdd70de0493bab46e475bc41aa69ad328da381
SHA256

8b4bdb9821aacdcbbe14aec3e36ac428a672579816281b9536e31762f1f5fc5e
SHA512

1e2c7b1b6553a54842f7954403b4b32a36682cf12ff89169caf0114d718e2aa5c9e46bfee4a0ba136cc744c89f413bac510db933255c74a178a54120fae41d60
SSDEEP

6144:v4Lxg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7o3:Kg7dUmmLen1G6Lkjr7plWzuDRsVq23

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2235dc58b83f15d5dc6cbdbd7931bc64_JaffaCakes118

Files

2235dc58b83f15d5dc6cbdbd7931bc64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

443d5084ecb83ce2a4fc2865a5822db5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
CloseHandle
GetCalendarInfoA
LocalFree
LocalLock
CreateFileA
GetConsoleCP
FreeEnvironmentStringsA
GetACP
FindAtomA
GlobalUnlock
LoadLibraryExA
GetConsoleAliasA
GetModuleHandleA
WaitForMultipleObjects
Sleep
GetLastError
TlsGetValue
HeapCreate
FindClose

user32

GetDlgItem
DrawEdge
CallWindowProcA
DefWindowProcA
FillRect
CascadeWindows
GetIconInfo
SetFocus
DispatchMessageA
GetDC
DrawTextA
CheckRadioButton
IsWindow
MessageBoxA

setupapi

SetupCloseInfFile
SetupCloseLog
CM_Add_IDA
CMP_Report_LogOn
CM_Add_Range

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ