824c671d3985504a59c5f75b9af8cba1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

824c671d3985504a59c5f75b9af8cba1_JaffaCakes118
Size

56KB
MD5

824c671d3985504a59c5f75b9af8cba1
SHA1

5eb552374932b919caf80064244a82dc129d64a0
SHA256

94b3d62fb2a9f54f3458c79a4a5bfb827a2adf0f2758f2af1587feafc42a76ee
SHA512

77c0465236f84731e6984f5012d4aa5be923ac5ad99954851d0e4e6655dc1fa4e59d4bc8e1e07c9972cc8ec0bf0221b908e32b52fa57901194541b3d15d35104
SSDEEP

1536:Y7G2u0FOVboXmlQ1GCPmQTldrwthJMoFoaBA0pJPCC:y9u0FOVboXmlQACPmQTlZwPioF7a0XCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
824c671d3985504a59c5f75b9af8cba1_JaffaCakes118

Files

824c671d3985504a59c5f75b9af8cba1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b49cc2fe984facbc3408937684288542

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetConsoleCP
LocalLock
GetConsoleAliasW
FindClose
CreateFileMappingA
WaitForMultipleObjects
GetCalendarInfoA
LocalFree
GetLastError
FreeEnvironmentStringsA
LoadLibraryExA
CreateFileA
CloseHandle
TlsGetValue
GetModuleHandleA
HeapCreate
GetACP
GlobalUnlock
FindAtomA

user32

DispatchMessageA
CallWindowProcA
GetDC
CopyRect
DrawTextA
DrawEdge
DefWindowProcW
GetDlgItem
IsWindow
SetFocus
FillRect
CheckRadioButton
GetIconInfo
MessageBoxA

setupapi

CMP_Report_LogOn
SetupCloseLog
CM_Add_IDA
SetupCloseInfFile
CM_Add_Range

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ