63dab1980be67f9a6bac1472690cf1c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63dab1980be67f9a6bac1472690cf1c5_JaffaCakes118
Size

373KB
MD5

63dab1980be67f9a6bac1472690cf1c5
SHA1

ba2031d420262b47089d68991d94383518ec2ce1
SHA256

8a6f264374f7841d92aa58debae070d530c140805b90521f38418702dd05cf6b
SHA512

6abd8ea722e596d9afcf7ebbf7a72f4b932bd2408e257264dc82794a8bbb84936e885efade662247fb413e9ea00b5c063c3182120983882eb1a54dc85ebeff76
SSDEEP

6144:Tt/ZtPLnQODLAxKJrt724n6NpHbOL8KyzS664JzLfxOz1vE9slgR6ntQBmPV01:Tt/DnLDLAxart729XbO43zSd4Jz1ovEj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63dab1980be67f9a6bac1472690cf1c5_JaffaCakes118

Files

63dab1980be67f9a6bac1472690cf1c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bb2f44cbc157e8f258c9b13cbc58dfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CloseHandle
CreateFileW
lstrlenA
GetCommandLineW
GetCurrentDirectoryA
FindClose
CreateThread
lstrcpyA
HeapCreate
GetModuleHandleA
GetCurrentProcessId
PulseEvent
GetComputerNameA
UnmapViewOfFile
GetSystemTime
Sleep
LoadLibraryW
LocalFree
GlobalUnlock

user32

SetFocus
GetDlgItem
GetCaretPos
CallWindowProcA
DrawEdge
CheckRadioButton
GetDC
CreateWindowExA
DrawMenuBar
FillRect
IsWindow
CreateIcon
DispatchMessageA

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectCA
LocalEnroll

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ