b285a1ecceed620c411c33460ecba120_JaffaCakes118 | Triage

Sharing

General

Target

b285a1ecceed620c411c33460ecba120_JaffaCakes118
Size

815KB
MD5

b285a1ecceed620c411c33460ecba120
SHA1

7f9719d4db331e6382258ecda011b6799a1de240
SHA256

f0102ac86e07ae44ac21e89f7e57c99ecf93a902e3b882cb102943cea55c54cb
SHA512

82dd1fa42aef63a3fd56f50685e2b99983a375ced5f4d234e4e14067139187f5acc88467718dd9052814c0d8ba8faa698c30cb35783abbdd78646db2dda43bf0
SSDEEP

12288:a9Q8H461weTws44HPwSaghOlrNDrJc4x16pt6IpLoVa3p2CbBl/LZMA5JdUrT7cX:aF466u1ISerNDrr5QfXBTMOJdUrT7cX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b285a1ecceed620c411c33460ecba120_JaffaCakes118

Files

b285a1ecceed620c411c33460ecba120_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b40d4135b7bafe3b0a8fe0e6caed209e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileMappingA
CreateFileA
HeapCreate
FreeEnvironmentStringsA
TlsGetValue
GetModuleHandleA
GlobalUnlock
FindAtomA
LoadLibraryExA
GetCalendarInfoA
GetConsoleAliasW
FindClose
CloseHandle
LocalLock
Sleep
GetConsoleCP
GetLastError
LocalFree
WaitForMultipleObjects

user32

GetIconInfo
CopyRect
GetDC
DefWindowProcW
SetFocus
DrawTextA
DispatchMessageA
CallWindowProcA
GetDlgItem
CheckRadioButton
FillRect
IsWindow
DrawEdge
MessageBoxA

setupapi

CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ