a7875c141b0b34c4e56e246fc9d492d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7875c141b0b34c4e56e246fc9d492d3_JaffaCakes118
Size

396KB
MD5

a7875c141b0b34c4e56e246fc9d492d3
SHA1

e6733bec355fd4dbdc04cd423b224c3f7a391112
SHA256

b5697f28fad6882b986cada654fb7a944cf002af97e74651ea348b52aa9f2af6
SHA512

f19d3bb4b2560f1facaab4520fb021bcbd854300d4d9081b2cde8e44619470e7ecad19feb9eac1e5cea2ad38acfe0367a53a6de16d41014feb2f34e4986256e7
SSDEEP

6144:82Uqol32GmCwt3Ncm1pR2tVAdNqDMYD6k6F1+B8yzxmnvwlKfHq:82UbdA3NcGutVAdEDMFhFeEnvwSq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7875c141b0b34c4e56e246fc9d492d3_JaffaCakes118

Files

a7875c141b0b34c4e56e246fc9d492d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e36790edc1d2e6f20f032751ff9c2773

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
GetCommandLineW
LoadLibraryW
LocalFree
UnmapViewOfFile
lstrlenA
GlobalUnlock
GetTickCount
CloseHandle
GetComputerNameA
ResetEvent
FindClose
GetSystemTime
HeapCreate
Sleep
lstrcpyA
CreateThread
GetModuleHandleA
CreateFileW
GetCurrentDirectoryA

user32

DrawEdge
CallWindowProcA
GetDC
GetKeyState
DispatchMessageA
SetFocus
CreateWindowExA
FillRect
DrawMenuBar
IsWindow
GetDlgItem
CheckRadioButton
GetScrollBarInfo

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
LocalEnroll
WizardFree
CryptUIDlgCertMgr

timedate.cpl

CPlApplet

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ