a5c9f2390914c4461d063eb4b1787731_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5c9f2390914c4461d063eb4b1787731_JaffaCakes118
Size

392KB
MD5

a5c9f2390914c4461d063eb4b1787731
SHA1

1aee55dccea8660ecb934929bf1470c46a6968e4
SHA256

9971476cd34008d43d80a21207f3da231ee3d2d36fefb12bcafff2ef2a3d5abb
SHA512

27d6d9c838f2091d0d78fb960f8af918a59a9245d441d5485e384ecbccee769e2106879a8ee5f4d2a9bffb4e5f5eb76a73892f55185255f705c8b340743a8729
SSDEEP

12288:hd5sTH4JGqud/+GyVod/A0RIhKcGicLo:hd5SSBGyVITRIhKz1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5c9f2390914c4461d063eb4b1787731_JaffaCakes118

Files

a5c9f2390914c4461d063eb4b1787731_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1add3b427afe3f3fca5b43ad5e37dacd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
FindVolumeClose
HeapCreate
LoadLibraryExW
LocalFree
UnmapViewOfFile
lstrlenA
CreateThread
GetModuleHandleA
GetTickCount
SetEvent
GetSystemTime
GetComputerNameA
SetLastError
GetCommandLineW
Sleep
CloseHandle
GetCurrentDirectoryA
LocalUnlock
CreateFileA

user32

GetDC
FillRect
CallWindowProcA
CreateWindowExA
DrawEdge
IsWindow
SetFocus
GetDlgItem
CheckRadioButton
GetComboBoxInfo
DispatchMessageA
GetKeyState
DrawMenuBar

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
CryptUIDlgCertMgr
LocalEnroll
WizardFree

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ