478f0d560e37e2ffa62a2fd25c939999_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

478f0d560e37e2ffa62a2fd25c939999_JaffaCakes118
Size

414KB
MD5

478f0d560e37e2ffa62a2fd25c939999
SHA1

6b6ba592c4cc8b742140162c5e15c97cb63caa08
SHA256

bc4d47bbd8b21b5bb06442bae7fc563c743c12049c00a8b67ca66f6588744da4
SHA512

139d6b7b3209c519fdc0abb635cf553c36c4e6fce675be0b7cad00dfabade9a71e4f1d886093569167bc67ae9956f2550da84f6f5ebd1dc2e009eca9af77c96a
SSDEEP

12288:KnoPmrkNkVhkkuK2Qtm98oQ8wUDXVzwl:1PyCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
478f0d560e37e2ffa62a2fd25c939999_JaffaCakes118

Files

478f0d560e37e2ffa62a2fd25c939999_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70c79d906725de0a20e160461957646f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
LoadLibraryW
ReleaseMutex
GetDriveTypeA
GetFileAttributesW
LocalFree
FindAtomA
ExitThread
SetEvent
CreateFileA
HeapCreate
GetProcessHeap
GetTickCount
GetDiskFreeSpaceW
GetCommandLineW
GetLocalTime
CloseHandle
ReleaseMutex
lstrcpynA
LoadLibraryA

user32

SetFocus
CallWindowProcA
GetComboBoxInfo
DestroyCaret
CreateWindowExA
CloseWindow
FillRect
GetKeyState
GetClipCursor
DispatchMessageA
GetDlgItem
DrawStateA
GetClassInfoA

snmpapi

SnmpUtilMemAlloc
SnmpTfxClose
SnmpUtilMemFree
SnmpTfxQuery
SnmpTfxOpen

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ