5e4a03cdfe3052f43946a895425e0c54_JaffaCakes118 | Triage

Sharing

General

Target

5e4a03cdfe3052f43946a895425e0c54_JaffaCakes118
Size

393KB
MD5

5e4a03cdfe3052f43946a895425e0c54
SHA1

8fcc47251078d21c758cd596d10d05d73c4a928d
SHA256

f10fcea591ad30f8641defc7422da910b68c0b8b44c706efe391e7566c9b2fe5
SHA512

45fb4ec083593120698ae2be7fffa078d79ea157bd626e786c70207a2a4792ba9ff60b56a60f4ff1fcee8dadb4dcfddce5034ae31e8495b3edcdb47efeb08ceb
SSDEEP

12288:tMg7dUmmLen1G6Lkjr7plWzuDRsVqvJ/z:6g7dkenE6Qf7fpue/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e4a03cdfe3052f43946a895425e0c54_JaffaCakes118

Files

5e4a03cdfe3052f43946a895425e0c54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb9412034bc53405cf50cd9dd2115373

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
LocalFree
CloseHandle
LoadLibraryExA
Sleep
GetACP
GetLastError
FindAtomA
GetCalendarInfoA
WaitForMultipleObjects
CreateFileA
GetConsoleAliasA
FreeEnvironmentStringsA
HeapCreate
FindClose
GetConsoleCP
GlobalUnlock
CreateFileMappingA
LocalLock
GetModuleHandleA

user32

GetDC
FillRect
SetFocus
CheckRadioButton
DispatchMessageA
DrawTextA
CallWindowProcA
DrawEdge
DefWindowProcA
CascadeWindows
GetIconInfo
IsWindow
GetDlgItem
MessageBoxA

setupapi

SetupCloseLog
CM_Add_Range
CMP_Report_LogOn
SetupCloseInfFile
CM_Add_IDA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ