a90467a77c20adaf1c6d2e07f83591e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a90467a77c20adaf1c6d2e07f83591e0_JaffaCakes118
Size

414KB
MD5

a90467a77c20adaf1c6d2e07f83591e0
SHA1

8029e6b82591740e5fccf4dc685b90c9c8b2b6ef
SHA256

a80424e1f26e3d792147fd5fa62ef9ae692aa4784f7c5d25d2f63c1d7771005d
SHA512

5334e3f19faef7cd40e34d22e1449dff4c37b7d37d1303573d18cfe0bfda605094a88e3572c77af67e5f5220a5bff42cb7957e2dd22d9df51a8715d6bbf11a53
SSDEEP

12288:Kn+PmrkNkVhkkuK2Qtm98oQ8wUDXVzwl:/PyCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a90467a77c20adaf1c6d2e07f83591e0_JaffaCakes118

Files

a90467a77c20adaf1c6d2e07f83591e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70c79d906725de0a20e160461957646f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
LoadLibraryW
ReleaseMutex
GetDriveTypeA
GetFileAttributesW
LocalFree
FindAtomA
ExitThread
SetEvent
CreateFileA
HeapCreate
GetProcessHeap
GetTickCount
GetDiskFreeSpaceW
GetCommandLineW
GetLocalTime
CloseHandle
ReleaseMutex
lstrcpynA
LoadLibraryA

user32

SetFocus
CallWindowProcA
GetComboBoxInfo
DestroyCaret
CreateWindowExA
CloseWindow
FillRect
GetKeyState
GetClipCursor
DispatchMessageA
GetDlgItem
DrawStateA
GetClassInfoA

snmpapi

SnmpUtilMemAlloc
SnmpTfxClose
SnmpUtilMemFree
SnmpTfxQuery
SnmpTfxOpen

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ