abf44fbb8a38e7f04486ee4f61424700_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abf44fbb8a38e7f04486ee4f61424700_JaffaCakes118
Size

326KB
MD5

abf44fbb8a38e7f04486ee4f61424700
SHA1

f8c2621a63a8b8a6aa5fa4fd773254b036233a31
SHA256

584cb0fecc202fe48068500274f4be3043a933909ebb2a0a647efebce5060532
SHA512

68e669104ec4914aa5af5e9b47dd4bf16469b0f1e35e2de79a6a7eb7e08903305b5fb6b3f78b52374500fae1bf0b02dd1bd1c0337627d7f99b30f147372b2fab
SSDEEP

6144:JqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:vO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf44fbb8a38e7f04486ee4f61424700_JaffaCakes118

Files

abf44fbb8a38e7f04486ee4f61424700_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9447df289ab7831d9f06579d7b6cb0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
GetModuleHandleA
GetDateFormatA
GetCommandLineW
Sleep
FindVolumeClose
LocalFree
GetComputerNameA
CreateThread
ResetEvent
CloseHandle
UnmapViewOfFile
GetSystemTime
GetDiskFreeSpaceA
lstrlenA
CreateFileA
GetTickCount
LoadLibraryW
HeapCreate
SetLastError

user32

GetComboBoxInfo
GetDC
DrawStateA
DrawMenuBar
DispatchMessageA
GetDlgItem
FillRect
CreateWindowExA
SetFocus
CallWindowProcA
CheckRadioButton
IsWindow
DrawEdge

advapi32

RegEnumValueA
RegCloseKey
FreeSid
IsTokenUntrusted
RegDeleteKeyA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ