b3949ae01bb3ae000126b547259e43dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3949ae01bb3ae000126b547259e43dd_JaffaCakes118
Size

392KB
MD5

b3949ae01bb3ae000126b547259e43dd
SHA1

13dda84125f2ee3326045c7535f883a40c1f318f
SHA256

78dc390e5b9a397008fad555ce79936ac68b647faf490ce4f4dfdce4c08265b6
SHA512

0cdd7a081e8928e5c2161cc9fbf258c260751ede5d2f96526f75c58b04cc6522086b82a1d6817b652bdf20ac3c17da8264b0bd726db32b2d17d34638cc4d0555
SSDEEP

12288:hd5sTH4JGqud/+GyVod/A0RIhKcGicLo:hd5SSBGyVITRIhKz1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3949ae01bb3ae000126b547259e43dd_JaffaCakes118

Files

b3949ae01bb3ae000126b547259e43dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1add3b427afe3f3fca5b43ad5e37dacd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
FindVolumeClose
HeapCreate
LoadLibraryExW
LocalFree
UnmapViewOfFile
lstrlenA
CreateThread
GetModuleHandleA
GetTickCount
SetEvent
GetSystemTime
GetComputerNameA
SetLastError
GetCommandLineW
Sleep
CloseHandle
GetCurrentDirectoryA
LocalUnlock
CreateFileA

user32

GetDC
FillRect
CallWindowProcA
CreateWindowExA
DrawEdge
IsWindow
SetFocus
GetDlgItem
CheckRadioButton
GetComboBoxInfo
DispatchMessageA
GetKeyState
DrawMenuBar

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
CryptUIDlgCertMgr
LocalEnroll
WizardFree

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ