876edcd7940a0fc5f4d1c29317bbbde2_JaffaCakes118 | Triage

Sharing

General

Target

876edcd7940a0fc5f4d1c29317bbbde2_JaffaCakes118
Size

397KB
MD5

876edcd7940a0fc5f4d1c29317bbbde2
SHA1

daf246b5715d44cd018cb54385a8951d89af6b55
SHA256

13df2a986049e27a13fe130fed02ef7256a298359ac6d3abc4e9a43affc6bd98
SHA512

18989e120408940dfea868e0ddf90b59f095eae1412c4ab5c9591e777ca3a3f5ae6cd98333ad53849e301e16af6955d3b5cfbb59aff2e485773d3ac9afe3fac7
SSDEEP

6144:CeUqol32GmCwt3Ncm1pR2tVAdNqDMYD6k6F1+B8yzxmnvwlKfHmn8:CeUbdA3NcGutVAdEDMFhFeEnvwS48

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
876edcd7940a0fc5f4d1c29317bbbde2_JaffaCakes118

Files

876edcd7940a0fc5f4d1c29317bbbde2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5032b2b827d82230fc74174b508fc523

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrlenA
lstrcpyA
Sleep
ResetEvent
CloseHandle
FindClose
UnmapViewOfFile
CreateFileW
GlobalUnlock
HeapCreate
LoadLibraryW
GetCurrentDirectoryA
CreateThread
GetComputerNameA
LocalFree
PulseEvent
GetSystemTime
GetCommandLineW
GetModuleHandleA

user32

DrawMenuBar
CallWindowProcA
IsWindow
CreateWindowExA
DrawEdge
GetDlgItem
GetDC
FillRect
DispatchMessageA
GetScrollBarInfo
CheckRadioButton
SetFocus
GetKeyState

cryptui

WizardFree
CryptUIDlgCertMgr
LocalEnroll
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ