4126fbcebdfbc27c680bb29654131d17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4126fbcebdfbc27c680bb29654131d17_JaffaCakes118
Size

815KB
MD5

4126fbcebdfbc27c680bb29654131d17
SHA1

0a3051e9018fe2706835ad8a63af89b17a2e7f1e
SHA256

b1b1f8e70f74f165c9fa13c8208b02bb6047d2d36fe3ff5156d96dcf02a28bb8
SHA512

a768d70e168e2562bfe2d7a410d6d060f18ef0831ae97bd7809c51f2e8ec20656d2ecd230ced34d93c1411e640e7609a5aae62147f5bb53aa2c23640f6c3d854
SSDEEP

24576:h7oyFOKV/8/zukgo/tH0LkDjVUQy47IUyI:hq2oykrHxGQy47IUyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4126fbcebdfbc27c680bb29654131d17_JaffaCakes118

Files

4126fbcebdfbc27c680bb29654131d17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92fa217998a77df33e414fcf251ecea6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
FindAtomA
TlsGetValue
GlobalUnlock
GetConsoleAliasW
WaitForMultipleObjects
GetCalendarInfoA
GetLastError
CloseHandle
LocalLock
HeapCreate
Sleep
FreeEnvironmentStringsA
GetModuleHandleA
LocalFree
CreateFileA
CreateFileMappingA
GetConsoleCP
FindClose
LoadLibraryExA

user32

FillRect
DispatchMessageA
CheckRadioButton
DefWindowProcW
DrawEdge
CopyRect
CallWindowProcA
DrawTextA
GetDC
GetIconInfo
IsWindow
GetDlgItem
SetFocus
MessageBoxA

setupapi

SetupCloseLog
SetupCloseInfFile
CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ