7539df1c6de7a1d301a460a55bef1530_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7539df1c6de7a1d301a460a55bef1530_JaffaCakes118
Size

396KB
MD5

7539df1c6de7a1d301a460a55bef1530
SHA1

92f1acb6a5dae51da91bdb033d30dfd9716968a7
SHA256

d666fe166574c7d33618fcdf42dcd50f78677e6b27b5d09530249a297aacbd2d
SHA512

bba0e951a29839204b7937e2f11177cde72e7113329a72408a371e78c33eb7dd478a45b6e071391fd1158367450b5e8e031fc0d334e6a26c786848d8380796d2
SSDEEP

6144:CyUqol32GmCwt3Ncm1pR2tVAdNqDMYD6k6F1+B8yzxmnvwlKfHPl:CyUbdA3NcGutVAdEDMFhFeEnvwSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7539df1c6de7a1d301a460a55bef1530_JaffaCakes118

Files

7539df1c6de7a1d301a460a55bef1530_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7b1473e33988bc4c1b46a42110c87e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateFileW
GlobalUnlock
LoadLibraryW
CloseHandle
CreateThread
lstrcpyA
GetModuleHandleA
GetTickCount
UnmapViewOfFile
PulseEvent
GetSystemTime
Sleep
HeapCreate
GetComputerNameA
GetCurrentDirectoryA
GetCommandLineW
ResetEvent
LocalFree
lstrlenA

user32

FillRect
DispatchMessageA
SetFocus
IsWindow
GetDC
CallWindowProcA
GetKeyState
CheckRadioButton
DrawEdge
GetDlgItem
DrawMenuBar
GetScrollBarInfo
CreateWindowExA

cryptui

WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
LocalEnroll

timedate.cpl

CPlApplet

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ