a82cc081c0fc138fb16a201ee0a78241_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a82cc081c0fc138fb16a201ee0a78241_JaffaCakes118
Size

170KB
MD5

a82cc081c0fc138fb16a201ee0a78241
SHA1

55f2f11fa70e56485a969db7f391b6c1cda57a4d
SHA256

dc40a939f02c7068895855c37a0b657bf12f730adb45c1612ce90c2c18f97d8a
SHA512

b91716f2c33cd06bc0847170fd48b4d5d8945eb165812c4987d9738e4518f0c2c4a85ff75eaf0e76cdc96307ab38c5118d57988d460c75a96836f0209d33b733
SSDEEP

3072:k8Sv2H18QSgYKH+FM7Yytpn0w84itLA7VmRSwuy2n6SDR:kV2H1TgO77bt8bc4SwuN6wR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a82cc081c0fc138fb16a201ee0a78241_JaffaCakes118

Files

a82cc081c0fc138fb16a201ee0a78241_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1055a2b5b3ca2e18a968624605453bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA
sndPlaySoundA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

kernel32

lstrcpyA
GlobalAddAtomW
GetTimeZoneInformation
GetTempPathA
LoadLibraryW
ResetEvent
LeaveCriticalSection
WaitForSingleObject
LoadLibraryA
GetProcAddress
FileTimeToSystemTime
GetFullPathNameA
EnumResourceNamesA
EnterCriticalSection
SetEvent
VerLanguageNameA
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
Sleep
CreateThread
IsDBCSLeadByte
GetFullPathNameW
FreeLibrary

setupapi

InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ