8e1c1a385fcebbd7238bcc3879da3c7a_JaffaCakes118 | Triage

Sharing

General

Target

8e1c1a385fcebbd7238bcc3879da3c7a_JaffaCakes118
Size

396KB
MD5

8e1c1a385fcebbd7238bcc3879da3c7a
SHA1

60a98e9417772756612d9c5f2ca0e2914328edd0
SHA256

961cf644c3dd3213c319474487b69b2feea5989214da8984b41876e33b5828e6
SHA512

268cc2cac505ba0f445a5bdd63e36f46143d986726a34ca372f886dc052e0edb6016f3d208a615a6c2fdbe1f9b8a2c6f55f6d821a4678c0d9b3ab7f412657a3b
SSDEEP

6144:x2Uqol32GmCwt3Ncm1pR2tVAdNqDMYD6k6F1+B8yzxmnvwlKfHd:x2UbdA3NcGutVAdEDMFhFeEnvwSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1c1a385fcebbd7238bcc3879da3c7a_JaffaCakes118

Files

8e1c1a385fcebbd7238bcc3879da3c7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e36790edc1d2e6f20f032751ff9c2773

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
GetCommandLineW
LoadLibraryW
LocalFree
UnmapViewOfFile
lstrlenA
GlobalUnlock
GetTickCount
CloseHandle
GetComputerNameA
ResetEvent
FindClose
GetSystemTime
HeapCreate
Sleep
lstrcpyA
CreateThread
GetModuleHandleA
CreateFileW
GetCurrentDirectoryA

user32

DrawEdge
CallWindowProcA
GetDC
GetKeyState
DispatchMessageA
SetFocus
CreateWindowExA
FillRect
DrawMenuBar
IsWindow
GetDlgItem
CheckRadioButton
GetScrollBarInfo

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
LocalEnroll
WizardFree
CryptUIDlgCertMgr

timedate.cpl

CPlApplet

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ