9fc53aa285b6d8e6abae6d490bae4a0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fc53aa285b6d8e6abae6d490bae4a0a_JaffaCakes118
Size

373KB
MD5

9fc53aa285b6d8e6abae6d490bae4a0a
SHA1

288e2573d33224a45fa41e33606e653bc626319b
SHA256

030da23f9716b311a5810db63f2bc40c73cd8e5bfb65f3c7e5eef694d1559e31
SHA512

47dcabd190dc645794b0dd84cef885e91fb0c7821fd6239fedcd5fec506b43398d8c1517e6f846c53144c9fe04474516a4979ef4d7179c0023d758b7c26453c2
SSDEEP

6144:GWY0Pmg9EIxV0NuYsrIwFRPhFPJc8XQ8A62FsuGwtsGkBM8iP2W1:GWY0PMNsPhjciomuGwtsGuiP2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fc53aa285b6d8e6abae6d490bae4a0a_JaffaCakes118

Files

9fc53aa285b6d8e6abae6d490bae4a0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d889be417a3a759dcbbd18b8fd3a33c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateFileW
GlobalUnlock
LoadLibraryW
CloseHandle
CreateThread
lstrcpyA
GetModuleHandleA
GetCurrentProcessId
UnmapViewOfFile
PulseEvent
GetSystemTime
Sleep
HeapCreate
GetComputerNameA
GetCurrentDirectoryA
GetCommandLineW
ResetEvent
LocalFree
lstrlenA

user32

FillRect
DispatchMessageA
SetFocus
IsWindow
GetDC
CallWindowProcA
GetCaretPos
CheckRadioButton
DrawEdge
GetDlgItem
DrawMenuBar
CreateIcon
CreateWindowExA

cryptui

WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
LocalEnroll

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ