59afe700ef46756e3fb85022996c3a77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59afe700ef46756e3fb85022996c3a77_JaffaCakes118
Size

326KB
MD5

59afe700ef46756e3fb85022996c3a77
SHA1

ae8ae8dc2153441f8d92abf670a98b776256f3cf
SHA256

9a50203d3f7d4781554831ef8238ce3567f498e200d3d267914a5e2c70434f74
SHA512

e176852f9af7fec1501996461a3f749c459a40a3ce35ccc08e5be9b18fa39900899c6610f475608e1731a09c60f07a4f73e1c2d6dafdbd82cc9b1b16d2a96052
SSDEEP

6144:JqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:vO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59afe700ef46756e3fb85022996c3a77_JaffaCakes118

Files

59afe700ef46756e3fb85022996c3a77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9447df289ab7831d9f06579d7b6cb0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
GetModuleHandleA
GetDateFormatA
GetCommandLineW
Sleep
FindVolumeClose
LocalFree
GetComputerNameA
CreateThread
ResetEvent
CloseHandle
UnmapViewOfFile
GetSystemTime
GetDiskFreeSpaceA
lstrlenA
CreateFileA
GetTickCount
LoadLibraryW
HeapCreate
SetLastError

user32

GetComboBoxInfo
GetDC
DrawStateA
DrawMenuBar
DispatchMessageA
GetDlgItem
FillRect
CreateWindowExA
SetFocus
CallWindowProcA
CheckRadioButton
IsWindow
DrawEdge

advapi32

RegEnumValueA
RegCloseKey
FreeSid
IsTokenUntrusted
RegDeleteKeyA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ