48ee296f03b4a8b88135d75da50734d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48ee296f03b4a8b88135d75da50734d2_JaffaCakes118
Size

334KB
MD5

48ee296f03b4a8b88135d75da50734d2
SHA1

65c1445e98045b4f96b6525b4c2651851247cf35
SHA256

8ba96a9c0e40ffa59de8a9f6eca1404d6ef284542fe0ab1f65118df1328e4ae7
SHA512

baed065bffce3455b87fa39b5e0fc83b0e200104e8a1a39f5598e71dd60c64ccd6cac3907c27cf4917587cf0b498867f10abe6e2c8ec51ff397a9fdc370ca7d6
SSDEEP

6144:U5AXOZNyD7dzY6VnCRK0Nt1Koif1D+yfHXw2rh4Uy3Gw5j5sxu/0S3abHGuIGahj:FPVCI0rIoUpP/5rKFrV3aHGu1a/ES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ee296f03b4a8b88135d75da50734d2_JaffaCakes118

Files

48ee296f03b4a8b88135d75da50734d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdea645c4f46c0ca8f6891a74ef627f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
ResetEvent
SetEvent
LoadLibraryW
GetFileAttributesW
ReleaseMutex
GetComputerNameA
GetTickCount
CloseHandle
GetModuleHandleA
lstrcmpW
GetDriveTypeA
LocalFree
CreateThread
FindAtomW
SetLastError
CreateFileA
GetCommandLineW
GetDiskFreeSpaceW
HeapCreate

user32

SetFocus
CreateWindowExA
GetClipCursor
GetComboBoxInfo
DestroyCaret
CloseWindow
DrawStateA
DispatchMessageA
GetClassInfoA
GetDlgItem
CallWindowProcA
FillRect
GetKeyState
MessageBoxA

cryptdlg

CertTrustInit
CertTrustCertPolicy
CertConfigureTrustA
CertTrustFinalPolicy
DecodeRecipientID

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ