42ce8e56d2676d3ac3b4f07ddb5ec6e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42ce8e56d2676d3ac3b4f07ddb5ec6e0_JaffaCakes118
Size

392KB
MD5

42ce8e56d2676d3ac3b4f07ddb5ec6e0
SHA1

e379092e8a838a98ea277612341542b089a5c101
SHA256

16c2d9ffec41df7d93f774d8e1a81094b4eaac96a55109ab7bed89318007721b
SHA512

659aac9f39fbbf2945df2e580b355d3cf53cf422748bf567f4bd50ba51d315f1629be7f97562fcc10424f76bc045158d78354ffccd26e2892b578995a0208b60
SSDEEP

6144:EctjjehO5+VLfPYloa3CO9UB5p6QjwvkVaC5o9xxwCJiIoappvCH81:TXehO5sDPJ6CZvjeAK9xKCJifp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42ce8e56d2676d3ac3b4f07ddb5ec6e0_JaffaCakes118

Files

42ce8e56d2676d3ac3b4f07ddb5ec6e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e3dc46be78327dd5e37bc74a1f1e74e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrlenA
CreateThread
Sleep
SetLastError
CloseHandle
SetEvent
UnmapViewOfFile
CreateFileA
LocalUnlock
HeapCreate
LoadLibraryExA
GetCurrentDirectoryA
CreateThread
GetComputerNameA
LocalFree
PulseEvent
GetSystemTime
GetCommandLineW
GetModuleHandleA

user32

DrawMenuBar
CallWindowProcA
IsWindow
CreateWindowExA
DrawEdge
GetDlgItem
GetDC
FillRect
DispatchMessageA
GetScrollBarInfo
CheckRadioButton
SetFocus
GetKeyState

clbcatq

CheckMemoryGates
UpdateFromAppChange
DowngradeAPL
SetupOpen
SetSetupSave

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ