352c318466ab69913656ee5f0d91dde2_JaffaCakes118 | Triage

Sharing

General

Target

352c318466ab69913656ee5f0d91dde2_JaffaCakes118
Size

299KB
MD5

352c318466ab69913656ee5f0d91dde2
SHA1

52de2b1cded917c4b6cd953d1cd46855ab5c9dea
SHA256

b38a8b1aec72ecf769a0ecec3e200f53f6edfd2e653abd970e64d0281d0e0d42
SHA512

57a29d578a32ab568b845cde21f89ec7cbd4b57d2025312cffd778d244520e9cae09455313b13c0708979c02df32c6e2086b8fe872c11ac038dcac7f0fbb466f
SSDEEP

6144:FQqg29xMgEqbv3dojcEXz1gObeeG02npqrksaDlY4v5ddkgt:FH99x8Gd0c8z15bfG0jktlXRduK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
352c318466ab69913656ee5f0d91dde2_JaffaCakes118

Files

352c318466ab69913656ee5f0d91dde2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9965c4cc8aa5e6fc5ba61fcae24266e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
CloseHandle
CreateFileA
lstrlenA
GetCommandLineW
GetCurrentDirectoryW
ResetEvent
CreateThread
GetTimeFormatA
HeapCreate
GetModuleHandleA
GetTickCount
FindVolumeClose
GetComputerNameA
UnmapViewOfFile
GetSystemTime
Sleep
LoadLibraryExW
LocalFree
LocalUnlock

user32

SetFocus
GetDlgItem
GetKeyState
CallWindowProcA
DrawEdge
CheckRadioButton
GetDC
CreateWindowExA
DrawMenuBar
FillRect
IsWindow
GetComboBoxInfo
DispatchMessageA

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectCA
LocalEnroll

hdwwiz.cpl

AddHardwareWizard

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ