4345a58f21221fad03a1707a11e6ace9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4345a58f21221fad03a1707a11e6ace9_JaffaCakes118
Size

393KB
MD5

4345a58f21221fad03a1707a11e6ace9
SHA1

055ae6fabafbaf9c6eaf5ffa4a09db63911eeca4
SHA256

db5639c205bc325e846586127771e3aaa45f5888cd7aa48d41a90f7793e373c3
SHA512

d9a80fa1bf87043a1d5fd43dd81c390ebfabeac5f58787b0a30da7df3ff4e71f2d3be9ff7be57c68934e3202b186d7ad2544c2d0dfa4776a7fb82d6c38f9e26d
SSDEEP

12288:tyg7dUmmLen1G6Lkjr7plWzuDRsVqpHqt:Ug7dkenE6Qf7fpuGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4345a58f21221fad03a1707a11e6ace9_JaffaCakes118

Files

4345a58f21221fad03a1707a11e6ace9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7080018158c980244ff2fc0fd9c66951

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
LocalFree
LoadLibraryExA
GetLastError
CreateFileA
GetConsoleCP
CreateFileMappingA
WaitForMultipleObjects
GetModuleHandleA
GetConsoleAliasA
GlobalUnlock
FindAtomA
LocalLock
HeapCreate
FindClose
TlsGetValue
CloseHandle
Sleep
GetACP
FreeEnvironmentStringsA

user32

GetIconInfo
CallWindowProcA
DefWindowProcA
IsWindow
CheckRadioButton
CascadeWindows
FillRect
DrawTextA
SetFocus
GetDlgItem
DispatchMessageA
DrawEdge
GetDC
MessageBoxA

setupapi

SetupCloseLog
SetupCloseInfFile
CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ