39fbb016a416a246e6d46adbf32350ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39fbb016a416a246e6d46adbf32350ea_JaffaCakes118
Size

393KB
MD5

39fbb016a416a246e6d46adbf32350ea
SHA1

d2f4b460bdfc18c8dfb0bd6aa7748c3bfca8e866
SHA256

ffafe7b82da676cebfdc6187181a90576b98cda861af2f922f2fbdf6b881a2e3
SHA512

9c3803fb52228c990be63477256939693c039958b64c51861627c722e19597abf334a7e2b715c489bc43325b5253ec4ec68f44b2d8f6dabed8085a9133d6a8a2
SSDEEP

6144:Wxg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7xfdR:sg7dUmmLen1G6Lkjr7plWzuDRsVqxfdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39fbb016a416a246e6d46adbf32350ea_JaffaCakes118

Files

39fbb016a416a246e6d46adbf32350ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7ec876f64096387fe8cbeb47b299360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
TlsGetValue
LoadLibraryExA
FreeEnvironmentStringsA
GetLastError
GetACP
LocalLock
GetCalendarInfoA
GetModuleHandleA
Sleep
CloseHandle
FindClose
CreateFileMappingA
WaitForMultipleObjects
GetConsoleCP
GlobalUnlock
LocalFree
GetConsoleAliasA
HeapCreate
CreateFileA

user32

GetDC
DispatchMessageA
DefWindowProcA
SetFocus
CheckRadioButton
GetIconInfo
IsWindow
FillRect
DrawEdge
DrawTextA
GetDlgItem
CascadeWindows
CallWindowProcA
MessageBoxA

setupapi

SetupCloseLog
CMP_Report_LogOn
CM_Add_IDA
SetupCloseInfFile
CM_Add_Range

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ