787a18e8792b9dcfa59a1d20f26f7b2e_JaffaCakes118 | Triage

Sharing

General

Target

787a18e8792b9dcfa59a1d20f26f7b2e_JaffaCakes118
Size

393KB
MD5

787a18e8792b9dcfa59a1d20f26f7b2e
SHA1

dd5106641cec2fb44f2c152c560129fc50527261
SHA256

88ebc42e239f09856f1567eec37d0fd2a324e18ed0e8fc9318811fb2b2d8c4a5
SHA512

3ad0ad05feb06cf0aa967e6a6ba3bfbdad4dc86e413a5535e1c7802b785febc837968511d22aa458b319b70e616cb8d28e6d8e4b61df8c0775894baf8c3bfbd7
SSDEEP

6144:Fp4i1vUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7cwk:F+SvULyjQorymC/aWYuosit3ZaoIDa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787a18e8792b9dcfa59a1d20f26f7b2e_JaffaCakes118

Files

787a18e8792b9dcfa59a1d20f26f7b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4858b47ea4190a7b86406e9db22957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetModuleHandleA
LocalLock
Sleep
FindAtomA
CloseHandle
CreateFileA
GlobalUnlock
LoadLibraryExA
GetConsoleCP
GetACP
LocalFree
FindClose
GetConsoleAliasW
CreateFileMappingA
GetCalendarInfoA
FreeEnvironmentStringsA
GetLastError
HeapCreate
WaitForMultipleObjects

user32

GetDlgItem
SetFocus
IsWindow
GetDC
CheckRadioButton
DispatchMessageA
DrawTextA
GetIconInfo
FillRect
CopyRect
CallWindowProcA
DefWindowProcW
DrawEdge
MessageBoxA

setupapi

CM_Add_IDA
CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ