b22205b15b4e334c4c62a65bec57f783_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b22205b15b4e334c4c62a65bec57f783_JaffaCakes118
Size

326KB
MD5

b22205b15b4e334c4c62a65bec57f783
SHA1

8a12b7055625ea5ad7831983720eafaa62bb794f
SHA256

a7ef77d241b9a1d5163ef17b8895254047bcd3d5a4defaf996bcdaad33293490
SHA512

ae110ee116b5bf6c6c7029ccb013934e3e266f9e72e7434cae3b07534449d3093a3c63756abb41f10e16bbe84d312524fd39f10b4ceb7f82fc069afb1cae3eec
SSDEEP

6144:pqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnra:PO1xm+QoK0t4K3gCTDYWGrYzt+NST7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b22205b15b4e334c4c62a65bec57f783_JaffaCakes118

Files

b22205b15b4e334c4c62a65bec57f783_JaffaCakes118
.exe windows:4 windows x86 arch:x86

078c46742cf75f036ee0f3440351c06d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LoadLibraryW
GetComputerNameA
GetDiskFreeSpaceA
CreateThread
FindVolumeClose
Sleep
GetModuleHandleA
SetLastError
LocalFree
ResetEvent
HeapCreate
GetSystemTime
LocalUnlock
CloseHandle
GetCommandLineW
lstrlenA
GetDateFormatA
CreateFileA
UnmapViewOfFile

user32

IsWindow
GetDC
SetFocus
CheckRadioButton
GetDlgItem
GetComboBoxInfo
DrawStateA
DispatchMessageA
FillRect
DrawEdge
DrawMenuBar
CallWindowProcA
CreateWindowExA

advapi32

IsTokenUntrusted
RegCloseKey
RegDeleteKeyA
FreeSid
RegEnumValueA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ