34efbb34c6bb5cc8f7bc8bcb5a0cffa3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34efbb34c6bb5cc8f7bc8bcb5a0cffa3_JaffaCakes118
Size

56KB
MD5

34efbb34c6bb5cc8f7bc8bcb5a0cffa3
SHA1

1ca84b5f53426a9d2b9c2b280abd225e8b65d6a3
SHA256

274456358ddc61ca175b847103c15244044b621941d5775918f47d139b8a20fd
SHA512

a19cbc528096598cbf62b9047db52f7b0924426d1d46d5d4c416762b19025b1f00d79d247cb46ed451ddbfb904a310e2bd5c9c26f58cefb0b9e5867af88a60b7
SSDEEP

768:Xc7m/fV/WfKrPZGS691s1G8nRO8XHldrhXiORbM0y7SXTSg1h74OE5Kc5ZIY7ZFA:sCWfKrBGS6js1LZldrJsUDSIkKcEd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34efbb34c6bb5cc8f7bc8bcb5a0cffa3_JaffaCakes118

Files

34efbb34c6bb5cc8f7bc8bcb5a0cffa3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5076d994f94eed023f97cf3ab77c661

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FreeEnvironmentStringsA
FindAtomA
GetConsoleAliasW
TlsGetValue
LocalLock
LoadLibraryExA
GetConsoleCP
GetLastError
CreateFileMappingA
HeapCreate
Sleep
LocalFree
CloseHandle
CreateFileA
GetACP
GlobalUnlock
WaitForMultipleObjects
FindClose
GetCalendarInfoA

user32

FillRect
DispatchMessageA
IsWindow
CallWindowProcA
GetIconInfo
DefWindowProcW
GetDlgItem
DrawEdge
SetFocus
GetDC
CheckRadioButton
CopyRect
DrawTextA
MessageBoxA

setupapi

SetupCloseLog
CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ