7404e5d81103e5dca5575017ac92e541_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7404e5d81103e5dca5575017ac92e541_JaffaCakes118
Size

56KB
MD5

7404e5d81103e5dca5575017ac92e541
SHA1

1b1064b29372472e8feaecd20215d830f65b486e
SHA256

724cb17053f4d33bfa59666f308f1265b88e15e111a9421098a37213d6915dfe
SHA512

398c54261b9679995f5b8d9d3bc3f638a7596e4977e7af4b2febda44de41d131b32d1205abbc4531aa77db6e8dc2aa59fb633a90c7b6ab58e3e697379e50c926
SSDEEP

1536:3i+TuOpm+baNTF5RrVPuX0sldrzNzh+mUtGMuF3:tuOpm+baNTFfrVPuXblZRhCC3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7404e5d81103e5dca5575017ac92e541_JaffaCakes118

Files

7404e5d81103e5dca5575017ac92e541_JaffaCakes118
.exe windows:4 windows x86 arch:x86

882cffeb1e94a2af9f3c0830dc643bc6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
LocalFree
FreeEnvironmentStringsA
HeapCreate
LoadLibraryExA
GetConsoleAliasW
GetConsoleCP
GlobalUnlock
LocalLock
CloseHandle
Sleep
GetCalendarInfoA
GetModuleHandleA
CreateFileMappingA
TlsGetValue
GetACP
FindClose
GetLastError
CreateFileA
WaitForMultipleObjects

user32

GetDC
CopyRect
DefWindowProcW
GetDlgItem
CallWindowProcA
DrawTextA
CheckRadioButton
GetIconInfo
FillRect
IsWindow
SetFocus
DrawEdge
DispatchMessageA
MessageBoxA

setupapi

SetupCloseInfFile
CMP_Report_LogOn
CM_Add_Range
CM_Add_IDA
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ