2376576d8307f63a10a0bef994c028e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2376576d8307f63a10a0bef994c028e3_JaffaCakes118
Size

393KB
MD5

2376576d8307f63a10a0bef994c028e3
SHA1

63574eb40359cd4657ec513541177fbf3cd96f1e
SHA256

22f0c5b9150a28c0420fbdf8c05fd483a0e4f3894d6a65451c5a7fa54fd4d5e9
SHA512

4870e87e3823224c7547fc5658a3dac8de53dd58a6c39001d9cffc2df6083d484cc7e37f11d5e72b5929e3a5a4aa1c46300bd353c38951149b51aba2c9c813e3
SSDEEP

12288:CMqFg7dUmmLen1G6Lkjr7plWzuDRsVq61:NqFg7dkenE6Qf7fpuJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2376576d8307f63a10a0bef994c028e3_JaffaCakes118

Files

2376576d8307f63a10a0bef994c028e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd7010a48390352781ad58cbcaf75843

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GlobalUnlock
Sleep
GetModuleHandleA
HeapCreate
CreateFileMappingA
LocalLock
LoadLibraryExA
LocalFree
FindAtomA
GetCalendarInfoA
FindClose
FreeEnvironmentStringsA
WaitForMultipleObjects
CloseHandle
TlsGetValue
GetConsoleAliasA
GetConsoleCP
CreateFileA
GetLastError

user32

CallWindowProcA
DefWindowProcA
SetFocus
DispatchMessageA
CascadeWindows
DrawEdge
GetIconInfo
DrawTextA
GetDlgItem
FillRect
IsWindow
GetDC
CheckRadioButton
MessageBoxA

setupapi

CM_Add_IDA
SetupCloseInfFile
SetupCloseLog
CM_Add_Range
CMP_Report_LogOn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ