23efbf6b24b4f9572dcf3bc1a730ddfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23efbf6b24b4f9572dcf3bc1a730ddfe_JaffaCakes118
Size

170KB
MD5

23efbf6b24b4f9572dcf3bc1a730ddfe
SHA1

a3b474e67b69ec189bf6cf1855f4c803c812e60a
SHA256

4120f4518188d0dcaec6f4b04f8f67b19133b7c1e26d57c2f0ad5925d2a26353
SHA512

50061220b9303eb34463f05d7acaacf6031712d06cfa7a6dff0510b9852c5695f1a5cacc4f50547760f0a8c0412193620030915d38714b8c8ce69da5840e9a49
SSDEEP

3072:3P+LNe076ghsBK5XL+y7w42EGpVo7GnCT7g9GvMbCFimejW5V:3GZeoxSy8SG1C/gAvMbCFRV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23efbf6b24b4f9572dcf3bc1a730ddfe_JaffaCakes118

Files

23efbf6b24b4f9572dcf3bc1a730ddfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a532770c1540810a8107015c898bcb8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

winmm

mciSendCommandA
sndPlaySoundA

setupapi

InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GetProcAddress
GetTickCount
Sleep
GlobalAddAtomW
FileTimeToSystemTime
IsDBCSLeadByte
OutputDebugStringA
DeleteCriticalSection
lstrcpyA
GetTempPathA
EnumResourceNamesA
GetFullPathNameW
SetEvent
ResetEvent
CreateThread
InitializeCriticalSection
VerLanguageNameA
GetTimeZoneInformation
WaitForSingleObject
LoadLibraryA
EnterCriticalSection
LoadLibraryW
GetFullPathNameA
LeaveCriticalSection
FreeLibrary

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ