96bcb2dbeb14741ad55722c5c9dddf31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96bcb2dbeb14741ad55722c5c9dddf31_JaffaCakes118
Size

393KB
MD5

96bcb2dbeb14741ad55722c5c9dddf31
SHA1

cac720cbdcd301b0638c84f87be4dbe9b1e56d86
SHA256

62b15eb256a52f05acd87d8b43f4352d595037a0108ba7105addfefa7351b84d
SHA512

6577bb58794d2356020853e61b25dd01bb84977c5340c94446e3e19973989f1ec7aaefb6bfae14e0274f65054d2bf6aaaecb65c2b24943150321c1bec46d194f
SSDEEP

6144:GR4i1vUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7cwk:GWSvULyjQorymC/aWYuosit3ZaoIDa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96bcb2dbeb14741ad55722c5c9dddf31_JaffaCakes118

Files

96bcb2dbeb14741ad55722c5c9dddf31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4858b47ea4190a7b86406e9db22957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetModuleHandleA
LocalLock
Sleep
FindAtomA
CloseHandle
CreateFileA
GlobalUnlock
LoadLibraryExA
GetConsoleCP
GetACP
LocalFree
FindClose
GetConsoleAliasW
CreateFileMappingA
GetCalendarInfoA
FreeEnvironmentStringsA
GetLastError
HeapCreate
WaitForMultipleObjects

user32

GetDlgItem
SetFocus
IsWindow
GetDC
CheckRadioButton
DispatchMessageA
DrawTextA
GetIconInfo
FillRect
CopyRect
CallWindowProcA
DefWindowProcW
DrawEdge
MessageBoxA

setupapi

CM_Add_IDA
CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ