a829b2f8974cf7744feea25d9b1ea8c6_JaffaCakes118 | Triage

Sharing

General

Target

a829b2f8974cf7744feea25d9b1ea8c6_JaffaCakes118
Size

815KB
MD5

a829b2f8974cf7744feea25d9b1ea8c6
SHA1

a0046c71b3bab0bdb8ae09a9ce0b440072708d67
SHA256

c8b09fcfe5537f2cb1d899e64d6d529571ad663ff37927217317954c08d7e062
SHA512

44858702fe4b6cc7e999522f48e6ac8a7fcc05b71db766a7908ec05f4f99178392bc26d5153360169cfc7707c45ba396d1b796e685a598ef71c0b97933c440e2
SSDEEP

24576:G4SBe3/X+1Sxepq+pfGQABKd9FOs7FvZpFyO+obO5fKvFaX:G4SBe3eSY0+pGQPZ7FvZbybPfGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a829b2f8974cf7744feea25d9b1ea8c6_JaffaCakes118

Files

a829b2f8974cf7744feea25d9b1ea8c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1653e54ea0729b985db838f24a1a7769

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
LoadLibraryExA
LocalFree
FreeEnvironmentStringsA
GetACP
WaitForMultipleObjects
Sleep
HeapCreate
CreateFileMappingA
LocalLock
GetCalendarInfoA
GlobalUnlock
GetLastError
FindAtomA
CreateFileA
GetConsoleAliasA
GetModuleHandleA
GetConsoleCP
CloseHandle
FindClose

user32

GetDC
CallWindowProcA
DrawTextA
GetDlgItem
DrawEdge
DefWindowProcA
CheckRadioButton
DispatchMessageA
IsWindow
SetFocus
GetIconInfo
CascadeWindows
FillRect
MessageBoxA

setupapi

CM_Add_Range
SetupCloseLog
SetupCloseInfFile
CM_Add_IDA
CMP_Report_LogOn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ