b20dcc19891108af5b501744c22080f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b20dcc19891108af5b501744c22080f5_JaffaCakes118
Size

815KB
MD5

b20dcc19891108af5b501744c22080f5
SHA1

f3900d0a17d8c31b9ace0f417d45c00b4090131e
SHA256

c7312fe480b82faeb3af50c0523aad8990c28dc026dcdda6785439ac85fca37b
SHA512

ec45ca147d3689b33cde7dfe5bb18012c8a07d9771a70fc0b996c9a7a858b4e6d13147c3440610ab60a94426a181a370e6f09210cb67f6dd1ab06471492f4be9
SSDEEP

12288:i9v8+6y6yV9TRTy0XMoE3TO+wcE9YGbOaXTasifWh7AEndrgR/Sxa1SBnAVKnQy5:innvRuIE3TpELTNi+hDdr9U1Sdv9bX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b20dcc19891108af5b501744c22080f5_JaffaCakes118

Files

b20dcc19891108af5b501744c22080f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f0465ad8d595f0cf00ca72a915c2f0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
Sleep
GlobalUnlock
GetACP
GetCalendarInfoA
CreateFileMappingA
GetLastError
CreateFileA
FreeEnvironmentStringsA
CloseHandle
GetConsoleAliasW
LoadLibraryExA
FindClose
LocalFree
TlsGetValue
GetConsoleCP
HeapCreate
GetModuleHandleA
FindAtomA
WaitForMultipleObjects

user32

DispatchMessageA
GetDlgItem
GetIconInfo
FillRect
CallWindowProcA
IsWindow
SetFocus
CheckRadioButton
DefWindowProcW
CopyRect
DrawTextA
GetDC
DrawEdge
MessageBoxA

setupapi

CMP_Report_LogOn
CM_Add_Range
CM_Add_IDA
SetupCloseInfFile
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ