b41d707cd531e93bc02c24e11ac96fc3_JaffaCakes118 | Triage

Sharing

General

Target

b41d707cd531e93bc02c24e11ac96fc3_JaffaCakes118
Size

393KB
MD5

b41d707cd531e93bc02c24e11ac96fc3
SHA1

265040257c53dee69536f2c1c5bfbf39170c8a77
SHA256

56cf575425e0126fb2c090bd3a962bd5d48881d7090bf7743f05e6a1006dfe88
SHA512

8d338bfc9133cbd67e8ee333cf6e169a6d52c859dbc4b9781f6a92f268278df51bbc0708b71f03fc5a99da574d2957e4cbde4db7486c67190f2056c7d43bcc8b
SSDEEP

12288:N+9g7dUmmLen1G6Lkjr7plWzuDRsVqxmA:N+9g7dkenE6Qf7fpua5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b41d707cd531e93bc02c24e11ac96fc3_JaffaCakes118

Files

b41d707cd531e93bc02c24e11ac96fc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2530560ce02c2bdb15d96db7c28847

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
WaitForMultipleObjects
CreateFileA
Sleep
FindClose
GetConsoleAliasA
LocalLock
GetCalendarInfoA
GetModuleHandleA
LocalFree
GetConsoleCP
HeapCreate
CreateFileMappingA
LoadLibraryExA
CloseHandle
FreeEnvironmentStringsA
GetACP
GetLastError
GlobalUnlock
FindAtomA

user32

SetFocus
CallWindowProcA
GetDlgItem
IsWindow
FillRect
CheckRadioButton
DrawTextA
GetDC
DispatchMessageA
CascadeWindows
GetIconInfo
DefWindowProcA
DrawEdge
MessageBoxA

setupapi

SetupCloseInfFile
CM_Add_Range
CM_Add_IDA
SetupCloseLog
CMP_Report_LogOn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ