881346ee73b6eac2f9e470a792282992_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

881346ee73b6eac2f9e470a792282992_JaffaCakes118
Size

56KB
MD5

881346ee73b6eac2f9e470a792282992
SHA1

2e4f892f8f5c8bb2acb8331fe15cc28786748f96
SHA256

bcb29865ad5839307ac3635e84b2f2028d0987cd51ffb4c22d1490664fd9a438
SHA512

491ed4054b5953513e2f60f27eb2f0264f3b7cff7664d20b63478c0fd360a007067b8511c09f44c868a279430e65ef424d28dcc47ee22739ed4032a0d34169eb
SSDEEP

1536:jYxTGCXtW4xM2W0m6k8g1ldrGfoQuOvDhqLPvE9W+ywFD:gKCXtW4xM2W0m6k/lZUoQuOvDYPv4Gwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
881346ee73b6eac2f9e470a792282992_JaffaCakes118

Files

881346ee73b6eac2f9e470a792282992_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5def1fbc929297bea5ad13172d69a787

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasW
TlsGetValue
FindAtomA
GetModuleHandleA
GetLastError
GetConsoleCP
LocalLock
LoadLibraryExA
WaitForMultipleObjects
GlobalUnlock
GetCalendarInfoA
GetACP
CreateFileMappingA
FreeEnvironmentStringsA
LocalFree
FindClose
CloseHandle
Sleep
HeapCreate
CreateFileA

user32

FillRect
GetIconInfo
CheckRadioButton
CopyRect
DispatchMessageA
SetFocus
DrawTextA
CallWindowProcA
GetDC
GetDlgItem
DrawEdge
IsWindow
DefWindowProcW
MessageBoxA

setupapi

CM_Add_Range
SetupCloseInfFile
CM_Add_IDA
SetupCloseLog
CMP_Report_LogOn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ