a8b8e2e8c5ec9a1d45919f1739903c0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8b8e2e8c5ec9a1d45919f1739903c0d_JaffaCakes118
Size

432KB
MD5

a8b8e2e8c5ec9a1d45919f1739903c0d
SHA1

d276e81fb2ed6075075aa7a69bf8ecf7aabfb0f7
SHA256

0ef68c084271bfcf380991a0f95d6b5b1ba6a3692c8307e7c81362a5074c3dc7
SHA512

5de377b50cbb8ded4847f3669c97fd9cbeb798feebaa4ccdbdb1b082fb5bc55d1c412ea8caf818ac0160c37ba33dab129247d5d55bef8809ae61ce0b076fb824
SSDEEP

12288:jIQSwkhPRWxwMIsQ+97Sg5mXEp0QcmrQq7s98lbE:MBwZuMIsQ+955rQ8s9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8b8e2e8c5ec9a1d45919f1739903c0d_JaffaCakes118

Files

a8b8e2e8c5ec9a1d45919f1739903c0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed78f7b9c15cbe560a0a8b1130f3a7c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CloseHandle
lstrcpynA
ResetEvent
GetTickCount
ReleaseMutex
GetLocalTime
GetDiskFreeSpaceW
GetComputerNameW
LoadLibraryW
GetTickCount
HeapCreate
GetCommandLineW
ReleaseMutex
FindAtomA
CreateFileA
GetDriveTypeA
ExitThread
GetFileAttributesA
LoadLibraryA

user32

CloseWindow
GetKeyState
CallWindowProcA
DispatchMessageA
SetFocus
GetClipCursor
GetDlgItem
DestroyCaret
GetComboBoxInfo
CreateWindowExA
DrawStateA
GetClassInfoA
FillRect

snmpapi

SnmpUtilMemFree
SnmpTfxClose
SnmpTfxQuery
SnmpUtilMemAlloc
SnmpTfxOpen

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ