b1992936ace9e1e47c557205872d1c43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1992936ace9e1e47c557205872d1c43_JaffaCakes118
Size

432KB
MD5

b1992936ace9e1e47c557205872d1c43
SHA1

105f77d4bc36699f15463b58a6f5e3b5e2ad4558
SHA256

b0fa763f81dd88153dbe1890c91bf0959dcae07b90204dee84f157aa1e032bb9
SHA512

d548cc251376cc221b39feee23737d98424d3d3f602a8078a6642ec69857a97faa9f7c42c6fc8df26b0f0bd7fa0797818c403066460ab7bbc9b7dece936b6baf
SSDEEP

12288:klQz0K+DIIx+PRWxwMIsQ+97Sg5mXEp0QcmrQq7s98lbE:tAzIIxzuMIsQ+955rQ8s9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1992936ace9e1e47c557205872d1c43_JaffaCakes118

Files

b1992936ace9e1e47c557205872d1c43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfaf7ec235eae9537881859725d16950

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ExitThread
HeapCreate
LoadLibraryW
LoadLibraryA
GetDiskFreeSpaceW
lstrcpynA
GetComputerNameW
GetCommandLineW
LocalFree
GetLocalTime
CreateFileA
FindAtomA
ReleaseMutex
GetTickCount
ResetEvent
GetFileAttributesA
GetDriveTypeA
ReleaseMutex
CloseHandle

user32

GetComboBoxInfo
CloseWindow
GetClassInfoA
GetClipCursor
DestroyCaret
SetFocus
FillRect
GetDlgItem
CallWindowProcA
GetKeyState
DrawStateA
CreateWindowExA
DispatchMessageA

snmpapi

SnmpTfxQuery
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpTfxOpen
SnmpTfxClose

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ