4dc0b3cc438ffb0ee4cdc35117a1200f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dc0b3cc438ffb0ee4cdc35117a1200f_JaffaCakes118
Size

392KB
MD5

4dc0b3cc438ffb0ee4cdc35117a1200f
SHA1

458a743a95cd3519c146bd80ad9bb3aa828f70d6
SHA256

1c1bea3e7ed948ff8ce04ed742e58d753b01f92faadd1e6212ddb1df4b3d0d31
SHA512

936e69c40b0fd4e50787128abb64ddd5011db6c0647231fd06d2e3b6b34fbbc98ced8b846f5224dc682d6698e44695933b265ed192699a4982c19be040aa17a1
SSDEEP

6144:WctjjehO5+VLfPYloa3CO9UB5p6QjwvkVaC5o9xxwCJiIoappvCH8:xXehO5sDPJ6CZvjeAK9xKCJifp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dc0b3cc438ffb0ee4cdc35117a1200f_JaffaCakes118

Files

4dc0b3cc438ffb0ee4cdc35117a1200f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

063db7be3ad4961ab3dbe14019f0af31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
CreateFileA
lstrlenA
GetTickCount
LocalUnlock
LoadLibraryA
GetSystemTime
HeapCreate
Sleep
CreateThread
GetCurrentDirectoryA
CloseHandle
PulseEvent
SetEvent
CreateThread
GetCommandLineW
LocalFree
SetLastError
GetModuleHandleA
GetComputerNameA

user32

GetScrollBarInfo
CreateWindowExA
DrawEdge
CheckRadioButton
GetDlgItem
DrawMenuBar
CallWindowProcA
FillRect
IsWindow
GetDC
SetFocus
GetKeyState
DispatchMessageA

clbcatq

UpdateFromAppChange
DowngradeAPL
SetupOpen
CheckMemoryGates
SetSetupSave

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ