32c1627af7f2582da29d79bcdf0db1f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32c1627af7f2582da29d79bcdf0db1f7_JaffaCakes118
Size

432KB
MD5

32c1627af7f2582da29d79bcdf0db1f7
SHA1

9a8ecca4ae8d8d4124628924ab61376d982ec1c4
SHA256

e13f10f67dd801708897a728f7a9ab13220b7f04ef771a3a3ff64c51e1cd8a7a
SHA512

5a694604b79c2711fbc2c3c720f027e8fe0889e621e7cf1dd80aad9fe25fc59fc88840e47f7472520ca892960a38e27e5be00e2938016aa4befab065c34b1e56
SSDEEP

12288:ktM9wgiPRWxwMIsQ+97Sg5mXEp0QcmrQq7s98lbE:19BHuMIsQ+955rQ8s9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32c1627af7f2582da29d79bcdf0db1f7_JaffaCakes118

Files

32c1627af7f2582da29d79bcdf0db1f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c3bb8ced9cf83cf11c3faa9a307ac45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
ReleaseMutex
LoadLibraryA
ResetEvent
ReleaseMutex
CloseHandle
ExitThread
FindAtomA
GetFileAttributesA
HeapCreate
GetTickCount
GetDriveTypeA
GetCommandLineW
LocalFree
LoadLibraryW
GetDiskFreeSpaceW
GetComputerNameW
GetTickCount
GetLocalTime
CreateFileA

user32

SetFocus
GetComboBoxInfo
DrawStateA
CloseWindow
DestroyCaret
CallWindowProcA
CreateWindowExA
DispatchMessageA
GetClipCursor
GetClassInfoA
GetDlgItem
GetKeyState
FillRect

snmpapi

SnmpUtilMemAlloc
SnmpTfxOpen
SnmpTfxClose
SnmpTfxQuery
SnmpUtilMemFree

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ