410c267d22ea5403fffa2d6a17e338c8_JaffaCakes118 | Triage

Sharing

General

Target

410c267d22ea5403fffa2d6a17e338c8_JaffaCakes118
Size

393KB
MD5

410c267d22ea5403fffa2d6a17e338c8
SHA1

f462ee32129f4a47bd50529fa08c80a71d8bfe22
SHA256

e049db6894da9e2504e684a2e57f46df86ebdb25479d3956a7db8a33b26ad319
SHA512

2de72e3579c524c22c6ebcbc70cfd7c829fce136854f202b15905488772b62bf18d5fb12abcc2bafdf11a9070a8c40a9d529cba7aa1e40d3d98fbd65154b8d84
SSDEEP

6144:wal4YUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7YeUS:eYvULyjQorymC/aWYuosit3ZaYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
410c267d22ea5403fffa2d6a17e338c8_JaffaCakes118

Files

410c267d22ea5403fffa2d6a17e338c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37da152359139b30bf5a80c16f7c9075

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GlobalUnlock
GetLastError
LoadLibraryExA
GetConsoleAliasW
GetCalendarInfoA
CreateFileA
Sleep
GetConsoleCP
CreateFileMappingA
CloseHandle
LocalLock
HeapCreate
LocalFree
FreeEnvironmentStringsA
FindAtomA
WaitForMultipleObjects
TlsGetValue
GetModuleHandleA
FindClose

user32

FillRect
DrawTextA
CopyRect
GetDC
SetFocus
GetIconInfo
DrawEdge
IsWindow
DispatchMessageA
GetDlgItem
DefWindowProcW
CheckRadioButton
CallWindowProcA
MessageBoxA

setupapi

CM_Add_IDA
CM_Add_Range
SetupCloseLog
CMP_Report_LogOn
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ