4ac10ee6a866b1caf51245651e8f0b60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ac10ee6a866b1caf51245651e8f0b60_JaffaCakes118
Size

396KB
MD5

4ac10ee6a866b1caf51245651e8f0b60
SHA1

bbf914a92aefd2c638f7bfa08e1c5fcc1d5f35b1
SHA256

fff2ccd564835a6696622cb37777d4526bc17ef5024043bd1647fdf44eba92da
SHA512

2f309e14252dc8fabddddf9d856b9a327271198a48585056b294747187c440138d4bb0424513f06a77d00cb537d31078890adda7ee14da347d81fb955cdc6d75
SSDEEP

6144:CmUqol32GmCwt3Ncm1pR2tVAdNqDMYD6k6F1+B8yzxmnvwlKfHD:CmUbdA3NcGutVAdEDMFhFeEnvwSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ac10ee6a866b1caf51245651e8f0b60_JaffaCakes118

Files

4ac10ee6a866b1caf51245651e8f0b60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

509a5638e65713b17dafe6f2972c5bbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetCommandLineW
LocalFree
CreateFileW
UnmapViewOfFile
PulseEvent
GetTickCount
lstrcpyA
GetCurrentDirectoryA
HeapCreate
lstrlenA
ResetEvent
CloseHandle
GlobalUnlock
GetModuleHandleA
Sleep
CreateThread
LoadLibraryW
GetComputerNameA
GetSystemTime

user32

IsWindow
CallWindowProcA
SetFocus
GetDlgItem
GetScrollBarInfo
DispatchMessageA
CreateWindowExA
CheckRadioButton
GetKeyState
FillRect
DrawEdge
GetDC
DrawMenuBar

cryptui

CryptUIDlgSelectCA
WizardFree
CryptUIDlgCertMgr
LocalEnroll
CryptUIDlgSelectStoreA

timedate.cpl

CPlApplet

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ