73d7edfcdb0b115d2576f8c0b6eb63a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73d7edfcdb0b115d2576f8c0b6eb63a6_JaffaCakes118
Size

373KB
MD5

73d7edfcdb0b115d2576f8c0b6eb63a6
SHA1

4c268a0e4dc6a8fbfee4d8e002a420b9f2f99808
SHA256

df6098cd2bcfe963f35f44d4578c4a2b67649c6e75358cb4fcbdb81ee757db30
SHA512

9770a59fa144fd54900db1868e526483bec5c7fcf537825a3b9faee968f9858ced4a04b5327e4350c4f3835688532f27debe574bc6500e517ceebbfa5bda3665
SSDEEP

6144:hKOdjZjTkgRAEGJuyNM/viO1/CNrh8GwKBM6vnRW9J:hKIjZjTkceuyeLQNrh8GjBMSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73d7edfcdb0b115d2576f8c0b6eb63a6_JaffaCakes118

Files

73d7edfcdb0b115d2576f8c0b6eb63a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c88bb2420ee60843e4b238d9886f7b14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
GetCurrentDirectoryA
lstrlenA
GetModuleHandleA
UnmapViewOfFile
PulseEvent
LoadLibraryW
CreateThread
FindClose
CloseHandle
GetComputerNameA
GetCommandLineW
LocalFree
Sleep
GetCurrentProcessId
HeapCreate
GlobalUnlock
lstrcpyA
ResetEvent
GetSystemTime

user32

GetDC
SetFocus
DrawMenuBar
FillRect
CreateIcon
GetDlgItem
CallWindowProcA
CheckRadioButton
IsWindow
DrawEdge
CreateWindowExA
GetCaretPos
DispatchMessageA

cryptui

LocalEnroll
WizardFree
CryptUIDlgSelectCA
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ