78bd5afae2d3806a6e04fb97ff5b7975_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78bd5afae2d3806a6e04fb97ff5b7975_JaffaCakes118
Size

802KB
MD5

78bd5afae2d3806a6e04fb97ff5b7975
SHA1

52da177fc8ac875a5a7494acf4b96d929f24b103
SHA256

19a44643f37af879ab44ac4b5990fb3c515ed7363b923d598cb287acfae8e3fd
SHA512

1060889636112c1f5db8aff79aad8f365bacbdeb52a8191429c7c5f6bab1770bc0e222cf901dbe9f1b3d8c38989eac61f3c8279c02e5b340320874131db16a0b
SSDEEP

12288:6nkpb1JSPcUG0v1ZYSQ2WAqcQqjXaQ0i6y38Av8ZUddHjoZuoD3yaUVtPaGySl:MkTUxC2FHjXTp6AdvZdw6SGyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78bd5afae2d3806a6e04fb97ff5b7975_JaffaCakes118

Files

78bd5afae2d3806a6e04fb97ff5b7975_JaffaCakes118
.exe windows:4 windows x86 arch:x86

321ab22314d20812618c0ebd54e96f72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetCurrentThreadId
LocalFree
HeapCreate
lstrcpyA
SetLastError
GetCommandLineA
CreateFileW
PulseEvent
GetCurrentDirectoryA
GetComputerNameA
lstrlenA
Sleep
FindClose
UnmapViewOfFile
FindResourceW
CreateProcessA
GetModuleHandleA
CloseHandle
LoadLibraryExW

user32

CallWindowProcA
DrawEdge
GetCaretPos
FillRect
GetDlgItem
GetDC
CreateWindowExA
CheckRadioButton
IsWindow
CreateIcon
DrawMenuBar
SetFocus
DispatchMessageA

cryptui

CryptUIDlgSelectStoreA
WizardFree
CryptUIDlgSelectCA
CryptUIDlgCertMgr
LocalEnroll

msctf

TF_InitSystem

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 793KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE