5e4dfdf2e60f3fde609307511f2599eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e4dfdf2e60f3fde609307511f2599eb_JaffaCakes118
Size

375KB
MD5

5e4dfdf2e60f3fde609307511f2599eb
SHA1

1052a84f3e0b7a93f6b9f62107e22f4b2dbd3888
SHA256

38822178f1769db113eb150c90d11b0da069aa22e0e0a927bb4ffe9edcdc952b
SHA512

e216c2ae5e292387435314dea72137a49334306618c2a15771c6f29aed07103a655612965e5d04219c0c44127a4415870f9467ada19914b26d19a8556d290ed9
SSDEEP

6144:hTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOlz:h/snlM/jzTAV/3alqvU84xRXmY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e4dfdf2e60f3fde609307511f2599eb_JaffaCakes118

Files

5e4dfdf2e60f3fde609307511f2599eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

383e751a09600f9b34d75351fbb29bca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
HeapCreate
CloseHandle
GetCommandLineW
ResetEvent
GetTickCount
FindClose
GetCurrentDirectoryA
Sleep
PulseEvent
LocalFree
lstrcatA
CreateFileW
GetSystemTime
UnmapViewOfFile
LoadLibraryW
GlobalUnlock
CreateThread
GetModuleHandleA
lstrlenA

user32

CheckRadioButton
FillRect
DispatchMessageA
GetScrollBarInfo
IsWindow
CallWindowProcA
GetKeyState
GetDlgItem
DrawMenuBar
DrawEdge
CreateWindowExA
GetDC
SetFocus

clbcatq

UpdateFromAppChange
CheckMemoryGates
SetupOpen
DowngradeAPL
SetSetupOpen

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ