a934ca76487fabc3b369c209c322dac1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a934ca76487fabc3b369c209c322dac1_JaffaCakes118
Size

393KB
MD5

a934ca76487fabc3b369c209c322dac1
SHA1

65127c79e3973e1924a6ab385ba9bb451f1f2bf5
SHA256

b051d81a3b2576be1068b9505a7101999c958b3b759719726fb9d9cdd28837da
SHA512

5ac1bd4e819845717429154a50e4907cd267c68b7fe01699b3b7a87638ac1d7b141a19834d3a117adafd7f98f786a835791ff99678e838647e3e33c75c595bf1
SSDEEP

6144:7Q4i1vUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7cwk:7LSvULyjQorymC/aWYuosit3ZaoIDa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a934ca76487fabc3b369c209c322dac1_JaffaCakes118

Files

a934ca76487fabc3b369c209c322dac1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4858b47ea4190a7b86406e9db22957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetModuleHandleA
LocalLock
Sleep
FindAtomA
CloseHandle
CreateFileA
GlobalUnlock
LoadLibraryExA
GetConsoleCP
GetACP
LocalFree
FindClose
GetConsoleAliasW
CreateFileMappingA
GetCalendarInfoA
FreeEnvironmentStringsA
GetLastError
HeapCreate
WaitForMultipleObjects

user32

GetDlgItem
SetFocus
IsWindow
GetDC
CheckRadioButton
DispatchMessageA
DrawTextA
GetIconInfo
FillRect
CopyRect
CallWindowProcA
DefWindowProcW
DrawEdge
MessageBoxA

setupapi

CM_Add_IDA
CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ