a9affe036d21408ab7bc5805144213c7_JaffaCakes118 | Triage

Sharing

General

Target

a9affe036d21408ab7bc5805144213c7_JaffaCakes118
Size

56KB
MD5

a9affe036d21408ab7bc5805144213c7
SHA1

fcfc575202ffe47c2f6d007345f69f97847e22dd
SHA256

3ddf92c6e1687cf153b70ba78eac1818eaeafb8451c9f20bb765eaa2abafad31
SHA512

b8f80d6ab73d63b225d2684b6213781ccc657bed1470ccf5620fc159574489cdd8ca4fefc935cffc1d616bd48139211ee4f750c4e60c1aabd9aa6ee36e2c3c53
SSDEEP

1536:dmr/lENcta/wR1Xq725RN3pkNA0lsOAEz7DsW6K:I/lYcta/adq725RN3pkNJfR9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9affe036d21408ab7bc5805144213c7_JaffaCakes118

Files

a9affe036d21408ab7bc5805144213c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1c20a0f64230fa74e342d22500b5104

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
GlobalUnlock
CreateFileMappingA
CloseHandle
TlsGetValue
FindAtomA
CreateFileA
WaitForMultipleObjects
GetACP
LoadLibraryExA
HeapCreate
GetLastError
GetConsoleAliasA
GetConsoleCP
FindClose
FreeEnvironmentStringsA
LocalLock
GetModuleHandleA
Sleep
LocalFree

user32

GetDC
GetDlgItem
CheckRadioButton
SetFocus
DefWindowProcA
IsWindow
FillRect
CascadeWindows
GetIconInfo
CallWindowProcA
DrawTextA
DispatchMessageA
DrawEdge
MessageBoxA

setupapi

SetupCloseInfFile
CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ