6888381bb999505d46fc6c1ab4bdc821_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6888381bb999505d46fc6c1ab4bdc821_JaffaCakes118
Size

396KB
MD5

6888381bb999505d46fc6c1ab4bdc821
SHA1

c457df62ca09fc537701ede66031f0a0fc9f0c7f
SHA256

2efcc3f8ed80c20465bf096b7cf503cd081f3a9bceccbb656406e7c90d36037b
SHA512

2f3e662cedcf180bf5e3aa08e8d11c21e849c85f0abb294bfa74b94b022ef91243a531217784e4a7df3072cf11d10e64cfc7e3e7a8d63b8bb977132f9886b966
SSDEEP

6144:J+Uqol32GmCwt3Ncm1pR2tVAdNqDMYD6k6F1+B8yzxmnvwlKfHlA:J+UbdA3NcGutVAdEDMFhFeEnvwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6888381bb999505d46fc6c1ab4bdc821_JaffaCakes118

Files

6888381bb999505d46fc6c1ab4bdc821_JaffaCakes118
.exe windows:4 windows x86 arch:x86

970840bec6f1eea785a794dd8ebb3c8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
LocalFree
GetModuleHandleA
lstrlenA
GetComputerNameA
FindClose
PulseEvent
HeapCreate
CreateThread
GetCurrentDirectoryA
CreateFileW
GetTickCount
GetCommandLineW
GetSystemTime
Sleep
lstrcpyA
LoadLibraryW
GlobalUnlock
UnmapViewOfFile
CloseHandle

user32

DrawEdge
GetDlgItem
CallWindowProcA
GetDC
GetScrollBarInfo
DrawMenuBar
FillRect
GetKeyState
DispatchMessageA
CheckRadioButton
SetFocus
IsWindow
CreateWindowExA

cryptui

LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectCA

timedate.cpl

CPlApplet

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ