8dfe9845a52842ca294f17f92f897070_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dfe9845a52842ca294f17f92f897070_JaffaCakes118
Size

393KB
MD5

8dfe9845a52842ca294f17f92f897070
SHA1

19a3597428d34b54ead7f0feea072e84fe4fb07a
SHA256

27b7687883bfda2117100057b4e8af32987ef32c662e41be919636f300013834
SHA512

68d41dbb538226ab26acfd1c1b4491608ec74576c5d03100fffd13ec59b2147445c6a5e3d98a96e23764ea283e06ddc3b86e89bad24a671665df80b59d78c227
SSDEEP

6144:kGCzUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7XFHn:kfvULyjQorymC/aWYuosit3Za1H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dfe9845a52842ca294f17f92f897070_JaffaCakes118

Files

8dfe9845a52842ca294f17f92f897070_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3935ec430f98a507f6cceda611613525

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
FindAtomA
GetLastError
WaitForMultipleObjects
GetACP
CloseHandle
LocalLock
GetConsoleAliasW
LocalFree
FreeEnvironmentStringsA
GlobalUnlock
CreateFileA
Sleep
FindClose
GetCalendarInfoA
HeapCreate
TlsGetValue
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA

user32

FillRect
SetFocus
CopyRect
DrawTextA
IsWindow
CheckRadioButton
DispatchMessageA
GetIconInfo
CallWindowProcA
DefWindowProcW
GetDlgItem
DrawEdge
GetDC
MessageBoxA

setupapi

SetupCloseLog
CM_Add_Range
CM_Add_IDA
CMP_Report_LogOn
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ