5f44f0e4a4b9680ca8f8fc6f57296356_JaffaCakes118 | Triage

Sharing

General

Target

5f44f0e4a4b9680ca8f8fc6f57296356_JaffaCakes118
Size

416KB
MD5

5f44f0e4a4b9680ca8f8fc6f57296356
SHA1

1b1a60857f8c9f313869715f1662a9a088edca17
SHA256

d852a4e33e89e0d1e2e153cc3668aa8f5c330c62d9b5fa44c8654721601dcadf
SHA512

7c62667e195507035bc847e1dd6febe8b4364a99b427dbc68ed8abde5e9378e2f044cfad60ffd81f6a26c6c98fe2606fb7faae34a051cfee34276781bd8f79a5
SSDEEP

12288:qn9+MdqgNXkNkVhkkuK2Qtm98oQ8wUDXVzwl:eXxCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f44f0e4a4b9680ca8f8fc6f57296356_JaffaCakes118

Files

5f44f0e4a4b9680ca8f8fc6f57296356_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43174cd82202f613fc8ba310f2e7cfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetEvent
HeapCreate
CloseHandle
ReleaseMutex
GetProcessHeap
GetFileAttributesW
GetCommandLineW
GetDiskFreeSpaceW
GetLocalTime
LoadLibraryW
LoadLibraryA
CreateFileA
FindAtomA
LocalFree
GetComputerNameW
lstrcpynA
GetDriveTypeA
ExitThread
ReleaseMutex

user32

GetComboBoxInfo
SetFocus
GetClipCursor
DispatchMessageA
CreateWindowExA
CloseWindow
DrawStateA
DestroyCaret
GetDlgItem
GetKeyState
GetClassInfoA
FillRect
CallWindowProcA

snmpapi

SnmpTfxClose
SnmpTfxQuery
SnmpTfxOpen
SnmpUtilMemFree
SnmpUtilMemAlloc

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ