89a474ef4a379ead9ca43f710b54c5c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89a474ef4a379ead9ca43f710b54c5c6_JaffaCakes118
Size

393KB
MD5

89a474ef4a379ead9ca43f710b54c5c6
SHA1

24aaadd667c2d34846b661574a56dbabe442adab
SHA256

506c2676b58f8efa390a382fb6548fbd03acc3e96437d44e7446a5e74c406f17
SHA512

9c01d5fa4824aa6c49e81e95dd2049d4cb923e73d59b619a2fa0dc960630dc04b2c5eb93b0fdf63b287554e7dc277706b914a3891f3f890fd7872f64f415d930
SSDEEP

6144:0OUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7Yi0LL:0OvULyjQorymC/aWYuosit3ZaB4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a474ef4a379ead9ca43f710b54c5c6_JaffaCakes118

Files

89a474ef4a379ead9ca43f710b54c5c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

811d1d6bc46563a5c9b456bdeacb0dcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
LoadLibraryExA
FindClose
FindAtomA
CreateFileMappingA
GetACP
GetCalendarInfoA
CreateFileA
FreeEnvironmentStringsA
GetLastError
LocalLock
GetModuleHandleA
CloseHandle
TlsGetValue
HeapCreate
GlobalUnlock
Sleep
LocalFree
GetConsoleCP
GetConsoleAliasW

user32

GetDlgItem
CheckRadioButton
DefWindowProcW
GetIconInfo
CopyRect
DrawTextA
DrawEdge
IsWindow
SetFocus
GetDC
FillRect
DispatchMessageA
CallWindowProcA
MessageBoxA

setupapi

CM_Add_IDA
SetupCloseInfFile
SetupCloseLog
CM_Add_Range
CMP_Report_LogOn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ