7436d68850ea2fb6423c614f5233552e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7436d68850ea2fb6423c614f5233552e_JaffaCakes118
Size

56KB
MD5

7436d68850ea2fb6423c614f5233552e
SHA1

17cf0e1a41c18542d8344c83adfccc6faf66fd89
SHA256

09f98cb5fa6aebb1b672dc3e2572f00ed0c569d92eb74b051dc4121af0657fd8
SHA512

4a2a893658bcf3497d24070a18e330fc232140e19a5b7440097c69e6e4e7335ddfe1300de44aeed62effad41ecc7927c16f65b9d5225444688322723147bcb31
SSDEEP

1536:I7IFUA1Axx6ydP/ldrk2Pc5M57W5WLOpvDro7j9rae:YIFUA1Axx6aXlZk2rmLrMBee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7436d68850ea2fb6423c614f5233552e_JaffaCakes118

Files

7436d68850ea2fb6423c614f5233552e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed6b5688de6847ab2658a4f2e88fd567

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
LoadLibraryExA
HeapCreate
CreateFileMappingA
LocalLock
FindAtomA
GetConsoleAliasW
FreeEnvironmentStringsA
GetCalendarInfoA
TlsGetValue
LocalFree
Sleep
FindClose
WaitForMultipleObjects
GetLastError
GetACP
GetConsoleCP
GlobalUnlock
CreateFileA
GetModuleHandleA

user32

DrawEdge
FillRect
IsWindow
SetFocus
CheckRadioButton
GetIconInfo
CopyRect
GetDC
CallWindowProcA
GetDlgItem
DispatchMessageA
DrawTextA
DefWindowProcW
MessageBoxA

setupapi

CM_Add_Range
CM_Add_IDA
SetupCloseInfFile
CMP_Report_LogOn
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ