b093ee8197124bf0a472a9616ae2dc9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b093ee8197124bf0a472a9616ae2dc9c_JaffaCakes118
Size

815KB
MD5

b093ee8197124bf0a472a9616ae2dc9c
SHA1

c483176dadceed0aebe94264add2403d473fcfe2
SHA256

02b54c278ebbde5bcf869f38b83e5b701a8e581c1462485086c4a72729871330
SHA512

93b5532318c2183137eb9bb82a286ee4caac9db6fe3ea50682b2c5ccce1983b4d1f01a5ffd95e5bc26900141d9f039abc4a6b3798186c05aa33cc6b0451b32f0
SSDEEP

12288:vZbq/TWazi7E8AdgJPfV07SsltuWYZhv60OrN5CgIgy2olP+6VsHjAEkittYNTww:Bbp3v107LkZUrzMhPdVmIutxlEJj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b093ee8197124bf0a472a9616ae2dc9c_JaffaCakes118

Files

b093ee8197124bf0a472a9616ae2dc9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33891e1e1e92ff2cbb095f0f2fa7de29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
CreateFileA
GetConsoleAliasW
HeapCreate
GetLastError
LocalLock
GetConsoleCP
GlobalUnlock
LocalFree
CloseHandle
WaitForMultipleObjects
GetModuleHandleA
FreeEnvironmentStringsA
CreateFileMappingA
FindAtomA
TlsGetValue
FindClose
Sleep
LoadLibraryExA
GetACP

user32

IsWindow
DefWindowProcW
DrawTextA
DispatchMessageA
DrawEdge
CopyRect
GetDC
GetIconInfo
GetDlgItem
SetFocus
CallWindowProcA
CheckRadioButton
FillRect
MessageBoxA

setupapi

SetupCloseLog
CMP_Report_LogOn
CM_Add_IDA
SetupCloseInfFile
CM_Add_Range

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ