357bd1f1822c1323c459adec517fd413_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

357bd1f1822c1323c459adec517fd413_JaffaCakes118
Size

326KB
MD5

357bd1f1822c1323c459adec517fd413
SHA1

b30090fbd8b26c493aea4d24b08b0031d38d9487
SHA256

1d4f47f2a71785e208a44e6cf9b4979dabb44e93e48ea14a12896deaa7048eec
SHA512

c45c0f9a188511a271baa5f9057d077462bba387af838c2ac6bc22629ad7a4071947e4f0641ce2019b841091c668be7936b08b2f3109e3786ca03eee3ba284f6
SSDEEP

6144:JqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:vO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357bd1f1822c1323c459adec517fd413_JaffaCakes118

Files

357bd1f1822c1323c459adec517fd413_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9447df289ab7831d9f06579d7b6cb0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
GetModuleHandleA
GetDateFormatA
GetCommandLineW
Sleep
FindVolumeClose
LocalFree
GetComputerNameA
CreateThread
ResetEvent
CloseHandle
UnmapViewOfFile
GetSystemTime
GetDiskFreeSpaceA
lstrlenA
CreateFileA
GetTickCount
LoadLibraryW
HeapCreate
SetLastError

user32

GetComboBoxInfo
GetDC
DrawStateA
DrawMenuBar
DispatchMessageA
GetDlgItem
FillRect
CreateWindowExA
SetFocus
CallWindowProcA
CheckRadioButton
IsWindow
DrawEdge

advapi32

RegEnumValueA
RegCloseKey
FreeSid
IsTokenUntrusted
RegDeleteKeyA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ