aca08b9e0e8ee69050467b92ecac185d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca08b9e0e8ee69050467b92ecac185d_JaffaCakes118
Size

375KB
MD5

aca08b9e0e8ee69050467b92ecac185d
SHA1

1c32fe15b9de26568b4f0471b201bb273aa1fca3
SHA256

b8261ad76ea130367943d3b2d5266b7e497b9b193f88b313e2df6ec06987682c
SHA512

515d721c71d71a10030fd60cfacc4456a278235339f604b7bdb5728a32fe7b15fc3c15d161d70197745243577228bbc2c7530a944d27473b8724f9223df505fa
SSDEEP

6144:8MwV4fc+fLVKff2mO7482Ridm3KSY/AWBLUFir2tUQG8UNL5wYrVKEEvLfdiCm:8rVL+fJE2ZBm3tmLUe2tU1py

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca08b9e0e8ee69050467b92ecac185d_JaffaCakes118

Files

aca08b9e0e8ee69050467b92ecac185d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa1c12b3dfd506dff1d722b27f993331

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
lstrlenA
lstrcpyA
Sleep
ResetEvent
CloseHandle
FindClose
UnmapViewOfFile
CreateFileW
GlobalUnlock
HeapCreate
LoadLibraryW
GetCurrentDirectoryA
CreateThread
GetComputerNameA
LocalFree
PulseEvent
GetSystemTime
GetCommandLineA
GetModuleHandleA

user32

DrawMenuBar
CallWindowProcA
IsWindow
CreateWindowExA
DrawEdge
GetDlgItem
GetDC
FillRect
DispatchMessageA
CreateIcon
CheckRadioButton
SetFocus
GetCaretPos

cryptui

WizardFree
CryptUIDlgCertMgr
LocalEnroll
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ