6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118
Size

432KB
MD5

6926e7b3baa991865c1caf0cec05a8d0
SHA1

f8c400416373302e6b2fd4ce9f7b50616e68401f
SHA256

8f7bbd03fa9f99c7832895c347630413b7818dfbe4858ad39a9518630a52a5c5
SHA512

4ea35e33c9f4de5ed3cde04a0492676b75e84ad3859c3aace60a2666e4396499b334e0badb4af73de8c58b41bb94ccf0369d00370d0a69321ce234018f80a040
SSDEEP

12288:6ZTFPRWxwMIsQ+97Sg5mXEp0QcmrQq7s98lbE:6VeuMIsQ+955rQ8s9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118

Files

6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8154def30ef8142b05acd5a08b501b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceW
GetFileAttributesA
CreateFileA
GetTickCount
ResetEvent
GetLocalTime
ReleaseMutex
FindAtomA
GetTickCount
GetDriveTypeA
LoadLibraryW
CloseHandle
LocalFree
HeapCreate
LoadLibraryA
ReleaseMutex
GetComputerNameW
GetCommandLineW
ExitThread
lstrcpynA

user32

GetClipCursor
GetDlgItem
FillRect
DispatchMessageA
CloseWindow
CreateWindowExA
GetKeyState
GetComboBoxInfo
SetFocus
CallWindowProcA
GetClassInfoA
DrawStateA
DestroyCaret

snmpapi

SnmpTfxClose
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpTfxOpen
SnmpTfxQuery

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ