6ef8c5b5d9ba999ea1f171028028d0f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ef8c5b5d9ba999ea1f171028028d0f8_JaffaCakes118
Size

416KB
MD5

6ef8c5b5d9ba999ea1f171028028d0f8
SHA1

691c6b8faaaa459a000833954bc29e692ff61702
SHA256

a5101a32d9b8e02b12bbfb2685a0b55d5dd9368c6897781fbfed2ed9f99a8e60
SHA512

90793dcdd18c49ca6def3f72b6757e7d5656ea62c9ed5328cd0b211c9059c5ae720fdc47a764dfd6a6c9b1c5bc4b2cf04c244d4173a289f035660a1cb8b89c77
SSDEEP

12288:qne+MdqgNXkNkVhkkuK2Qtm98oQ8wUDXVzwl:TXxCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef8c5b5d9ba999ea1f171028028d0f8_JaffaCakes118

Files

6ef8c5b5d9ba999ea1f171028028d0f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43174cd82202f613fc8ba310f2e7cfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetEvent
HeapCreate
CloseHandle
ReleaseMutex
GetProcessHeap
GetFileAttributesW
GetCommandLineW
GetDiskFreeSpaceW
GetLocalTime
LoadLibraryW
LoadLibraryA
CreateFileA
FindAtomA
LocalFree
GetComputerNameW
lstrcpynA
GetDriveTypeA
ExitThread
ReleaseMutex

user32

GetComboBoxInfo
SetFocus
GetClipCursor
DispatchMessageA
CreateWindowExA
CloseWindow
DrawStateA
DestroyCaret
GetDlgItem
GetKeyState
GetClassInfoA
FillRect
CallWindowProcA

snmpapi

SnmpTfxClose
SnmpTfxQuery
SnmpTfxOpen
SnmpUtilMemFree
SnmpUtilMemAlloc

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ