b409c68437debc72131c00ad7b8a5cff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b409c68437debc72131c00ad7b8a5cff_JaffaCakes118
Size

375KB
MD5

b409c68437debc72131c00ad7b8a5cff
SHA1

c39b984a9f1b824b18e78d9b744e38f5d43fd962
SHA256

6543374abeabf993d69e5761fe416e1cacf3ce67c967d990ef859df079908437
SHA512

11087330c64098f526bb4f7ddb6caa5222fdd118776ada8b7515148f074f795380e0204e457a5d822e436f2f77fef89f57231a43ab5227546a17794f0cf53826
SSDEEP

6144:puPwAAk/or+RcvWn6tFtJnENxnSY8f8tTU4NA2suApIGHrlzTtMl2E2sEkn:+jcOn6/TnEN9Ha8RdQIGHxTtK2gTn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b409c68437debc72131c00ad7b8a5cff_JaffaCakes118

Files

b409c68437debc72131c00ad7b8a5cff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e36777d930052915b0389213f5d7647

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
LocalLock
CreateFileA
FindAtomA
Sleep
FreeEnvironmentStringsA
TlsGetValue
GetConsoleAliasW
WaitForMultipleObjects
HeapCreate
GetModuleHandleA
GetACP
GetConsoleCP
GetCalendarInfoA
GetLastError
CreateFileMappingA
FindClose
LoadLibraryExA
LocalFree
GlobalUnlock

user32

SetFocus
GetDlgItem
GetIconInfo
CallWindowProcA
DrawEdge
CheckRadioButton
GetDC
CopyRect
DrawTextA
FillRect
IsWindow
DefWindowProcW
DispatchMessageA
MessageBoxA

setupapi

SetupCloseLog
CM_Add_Range
CM_Add_IDA
SetupCloseInfFile
CMP_Report_LogOn

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ