b0b2644e45319f3bebabe30c23507157_JaffaCakes118 | Triage

Sharing

General

Target

b0b2644e45319f3bebabe30c23507157_JaffaCakes118
Size

56KB
MD5

b0b2644e45319f3bebabe30c23507157
SHA1

a6b7d72dcea2ecddca0d47f0f5181f6641cdfa0e
SHA256

c374a3ec6094fc0d8d1219aa1b7dc65de507898c920c9e5c1082c1b92ea898b0
SHA512

375f3f16560ce9c4abb657259a2e58c4424b89ada38d82e8c3ea77ca4518258955cce5e74950b821b5792190f33bae8cd26139f6743262e7922fc584b42f56c8
SSDEEP

1536:q25MiWo65SmKqfcEHpmk5CYuEdrjxHLldrjnIGUmMjX268qVDVKYUi+a9wdZ:rMiWo65SmjfcEHpmk4YuEZVHLlZjnv4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b2644e45319f3bebabe30c23507157_JaffaCakes118

Files

b0b2644e45319f3bebabe30c23507157_JaffaCakes118
.exe windows:4 windows x86 arch:x86

263bd20be32a5bee77daf696018980d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindAtomA
GetCalendarInfoA
WaitForMultipleObjects
GetConsoleAliasW
HeapCreate
GetModuleHandleA
LocalFree
GlobalUnlock
LoadLibraryExA
Sleep
GetConsoleCP
GetLastError
CreateFileMappingA
TlsGetValue
CreateFileA
LocalLock
FreeEnvironmentStringsA
FindClose
GetACP

user32

DrawEdge
GetIconInfo
DrawTextA
GetDlgItem
CopyRect
GetDC
DispatchMessageA
CallWindowProcA
CheckRadioButton
IsWindow
SetFocus
FillRect
DefWindowProcW
MessageBoxA

setupapi

SetupCloseLog
CMP_Report_LogOn
CM_Add_Range
CM_Add_IDA
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ