a770829b7c309bf000c00252e1cf7af1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a770829b7c309bf000c00252e1cf7af1_JaffaCakes118
Size

324KB
MD5

a770829b7c309bf000c00252e1cf7af1
SHA1

3c4834c2fdcd6c4efd9b77478f89c522370f4d3f
SHA256

c59f81f13cf3d71e20914dd0769b36aae5f16456b459d0f2458eb9e6e934ec8d
SHA512

69f9d594667d6e11d6132040605e3f3b53d4d8ca3a76587f08908ed312688188505142d3712168e5a50dc6b3d8b17d26ce07c62643dea54ab932b371772a1209
SSDEEP

6144:bc6EVvCuaKnI4XI9zcb01xk9x0Iyb187tC:bADRXcwix8x0Iyb1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a770829b7c309bf000c00252e1cf7af1_JaffaCakes118

Files

a770829b7c309bf000c00252e1cf7af1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b1aafeda886e1f7ed2688a745c05a8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetCommandLineW
GetTickCount
CreateThread
CreateFileA
GetSystemTime
CloseHandle
PulseEvent
LocalUnlock
GetCurrentDirectoryA
SetEvent
HeapCreate
UnmapViewOfFile
lstrlenA
LocalFree
Sleep
GetModuleHandleA
LoadLibraryW
GetComputerNameA
lstrcatA

user32

GetScrollBarInfo
CheckRadioButton
DispatchMessageA
FillRect
SetFocus
IsWindow
DrawMenuBar
CreateWindowExA
GetDC
GetKeyState
GetDlgItem
DrawEdge
CallWindowProcA

clbcatq

CheckMemoryGates
DowngradeAPL
SetSetupOpen
UpdateFromAppChange
SetupOpen

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ