673c99f8eeb8e40169f273685bced62e_JaffaCakes118 | Triage

Sharing

General

Target

673c99f8eeb8e40169f273685bced62e_JaffaCakes118
Size

176KB
MD5

673c99f8eeb8e40169f273685bced62e
SHA1

ce2814149621fdc3fc4f36018ad59040538fdd43
SHA256

598ede0f96f6ed53063cb127a9d388034052c060de7a00c97051c2fa053faa7b
SHA512

0bcc57a685e21702e3dcd7b2550f527ae6607b6a23e1ca1a15f78ea8399ecf304f69aadbce9990bc8e11de8dd3cdd0f4cb50a284cbf4ddd017d0fc85cbf36bbe
SSDEEP

3072:b7C88dMwDyOpk7IcZi2GIgpQO3KR2oOgPugOQZ60z2FaskbQ4u/GhJW1E2W:68bwD3p3cZgf1AdXP392askB3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
673c99f8eeb8e40169f273685bced62e_JaffaCakes118

Files

673c99f8eeb8e40169f273685bced62e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55fe6194b319ef7753905662073e6bfa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GetTickCount
WaitForSingleObject
GlobalAddAtomW
LoadLibraryA
LeaveCriticalSection
OutputDebugStringA
FileTimeToSystemTime
InitializeCriticalSection
ResetEvent
GetProcAddress
GetTimeZoneInformation
EnumResourceNamesA
IsDBCSLeadByte
GetFullPathNameW
lstrcpyA
GetTempPathA
VerLanguageNameA
EnterCriticalSection
SetEvent
CreateThread
LoadLibraryW
GetFullPathNameA
Sleep
FreeLibrary

winmm

mciSendCommandA
sndPlaySoundA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ