7921693c82a1b99014a60ca7a625aed2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7921693c82a1b99014a60ca7a625aed2_JaffaCakes118
Size

397KB
MD5

7921693c82a1b99014a60ca7a625aed2
SHA1

44059e35cff87f6499347fbcb71de481735c7614
SHA256

a4f4ab7901469019b4c5a2bad3a5ddc696d7c816699ac9d379b0b93b60935144
SHA512

e15995eb7ebc8d89c99eb897aad8c9ce50f1b2b78eb8de7ee3651e4437f6e665743775f3954c34e13be9c0e98ea6df40c22bff92a10668b3fed8aa83dd2a48b7
SSDEEP

6144:beUqol32GmCwt3Ncm1pR2tVAdNqDMYD6k6F1+B8yzxmnvwlKfHHn8:beUbdA3NcGutVAdEDMFhFeEnvwSH8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7921693c82a1b99014a60ca7a625aed2_JaffaCakes118

Files

7921693c82a1b99014a60ca7a625aed2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5032b2b827d82230fc74174b508fc523

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrlenA
lstrcpyA
Sleep
ResetEvent
CloseHandle
FindClose
UnmapViewOfFile
CreateFileW
GlobalUnlock
HeapCreate
LoadLibraryW
GetCurrentDirectoryA
CreateThread
GetComputerNameA
LocalFree
PulseEvent
GetSystemTime
GetCommandLineW
GetModuleHandleA

user32

DrawMenuBar
CallWindowProcA
IsWindow
CreateWindowExA
DrawEdge
GetDlgItem
GetDC
FillRect
DispatchMessageA
GetScrollBarInfo
CheckRadioButton
SetFocus
GetKeyState

cryptui

WizardFree
CryptUIDlgCertMgr
LocalEnroll
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ