857e28c7f0471195fd6364bf5f456eae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

857e28c7f0471195fd6364bf5f456eae_JaffaCakes118
Size

170KB
MD5

857e28c7f0471195fd6364bf5f456eae
SHA1

3102fe3ba139d4daf0dd7d3f533ad9bf4053b434
SHA256

76bdf254f6c609231cf047e716defbc2ec6668e8298b436d6070cee9732248b2
SHA512

d8caad13c033cadeed2a903dd132b644504181796913b727b05ac35621999ab256c20f00f9491b5f1ca0f352766b8630781cc851939bf3382f1a3a1935e035ae
SSDEEP

3072:Qc4dggdLZsjOPyzr2pQNidnLT3WQ/sAg7vxyQg9wN9EFgugcmTmp17WGU+AH0:Qz9LZsKP05WnXcv5yj6Njcf7FUNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
857e28c7f0471195fd6364bf5f456eae_JaffaCakes118

Files

857e28c7f0471195fd6364bf5f456eae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56a81e2da83f922fec9fef816c43f550

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
lstrcpyA
Sleep
GlobalAddAtomW
GetFullPathNameW
SetEvent
CreateThread
GetTimeZoneInformation
LoadLibraryW
WaitForSingleObject
ResetEvent
GetTempPathA
EnumResourceNamesA
FileTimeToSystemTime
VerLanguageNameA
LoadLibraryA
OutputDebugStringA
GetFullPathNameA
EnterCriticalSection
DeleteCriticalSection
GetTickCount
LeaveCriticalSection
GetProcAddress
IsDBCSLeadByte
FreeLibrary

winmm

mciSendCommandA
sndPlaySoundA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ