5fc1408d96f11d1320acbb0a414ccaaf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fc1408d96f11d1320acbb0a414ccaaf_JaffaCakes118
Size

328KB
MD5

5fc1408d96f11d1320acbb0a414ccaaf
SHA1

2835ed122c39d6ff8b759d08a7c87f5ad431f961
SHA256

bd5a711a6698486464c71669bfcf0c0028b412d1b3f00e4a7b55a3c391a5f1fc
SHA512

e779fa3ee452855fdb53718c1af84600578d77b738bac7cb7f1f423960e45f6f75c1deb4dd74a2a4550000b88300303db0dc2494ca2ab0d419c3bd5b666b2c87
SSDEEP

6144:nAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4aA:A9Y5ioSsC5+BIK4Tg9EEigR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fc1408d96f11d1320acbb0a414ccaaf_JaffaCakes118

Files

5fc1408d96f11d1320acbb0a414ccaaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c129d29494c20fe98941914fdce4a8fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetModuleHandleA
lstrlenA
GetConsoleTitleA
SetLastError
GetCommandLineW
CreateThread
SetEvent
GetCurrentDirectoryA
UnmapViewOfFile
CloseHandle
HeapCreate
LocalFree
GetTickCount
PulseEvent
GetSystemTime
GetComputerNameA
LocalUnlock
CreateFileA
Sleep

user32

GetDlgItem
CheckRadioButton
IsWindow
DrawEdge
DrawMenuBar
GetScrollBarInfo
CreateWindowExA
CallWindowProcA
GetKeyState
GetDC
FillRect
SetFocus
DispatchMessageA

clbcatq

DowngradeAPL
SetupOpen
UpdateFromAppChange
CheckMemoryGates
SetSetupOpen

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ