656d29d23b655e361c3ebd3f4350540c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

656d29d23b655e361c3ebd3f4350540c_JaffaCakes118
Size

416KB
MD5

656d29d23b655e361c3ebd3f4350540c
SHA1

f3adf448a6baadcdb26cb22aa581743aa08c35f5
SHA256

36d13e2d739d761e8a2fbbb194bc7241c55b9d17717502e138c5b5a9bf0b5255
SHA512

ccf8ce2585904952425786817f11e8316f383c58d7ccbddc7576ad46b2698fec552fd848f081f458ce73e546854e826f167af460abda28558fb35f5e561d648e
SSDEEP

12288:qn7+MdqgNXkNkVhkkuK2Qtm98oQ8wUDXVzwl:kXxCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
656d29d23b655e361c3ebd3f4350540c_JaffaCakes118

Files

656d29d23b655e361c3ebd3f4350540c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43174cd82202f613fc8ba310f2e7cfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetEvent
HeapCreate
CloseHandle
ReleaseMutex
GetProcessHeap
GetFileAttributesW
GetCommandLineW
GetDiskFreeSpaceW
GetLocalTime
LoadLibraryW
LoadLibraryA
CreateFileA
FindAtomA
LocalFree
GetComputerNameW
lstrcpynA
GetDriveTypeA
ExitThread
ReleaseMutex

user32

GetComboBoxInfo
SetFocus
GetClipCursor
DispatchMessageA
CreateWindowExA
CloseWindow
DrawStateA
DestroyCaret
GetDlgItem
GetKeyState
GetClassInfoA
FillRect
CallWindowProcA

snmpapi

SnmpTfxClose
SnmpTfxQuery
SnmpTfxOpen
SnmpUtilMemFree
SnmpUtilMemAlloc

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ