b4be233341c15b6e218820e543122ff4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4be233341c15b6e218820e543122ff4_JaffaCakes118
Size

177KB
MD5

b4be233341c15b6e218820e543122ff4
SHA1

0b44eb17b0dd36d9c40cd9110c2447845790e4fd
SHA256

0462ff26f658c9a5e47a26f455e2314a2132f6aaba85feb20c38b0bfbe62bbc4
SHA512

ebb4d8cfbc1f00722fa71424f646b40b7d4fc94c3cdea685db10965f97fc2d2ba80b40bda5c811fe03bbbdb31dc2b4a0073c45c471487d87f4cf935464afd827
SSDEEP

3072:cPBgxZrGe1R1fA9gxWGJPAzmIG9Bb7lwNNatyPBLP8Q21Jqs8W7:cPexpP1IB42vcByNNJ50xv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4be233341c15b6e218820e543122ff4_JaffaCakes118

Files

b4be233341c15b6e218820e543122ff4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d944e5ab493fde7a73221782752fff4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAddBackslashA

msimg32

AlphaBlend
TransparentBlt

kernel32

LeaveCriticalSection
GlobalAddAtomW
GetTimeZoneInformation
Sleep
SetEvent
lstrcpyA
ResetEvent
FileTimeToSystemTime
IsDBCSLeadByte
LoadLibraryW
GetFullPathNameA
GetFullPathNameW
WaitForSingleObject
EnumResourceNamesA
VerLanguageNameA
DeleteCriticalSection
GetProcAddress
GetTempPathA
InitializeCriticalSection
OutputDebugStringA
LoadLibraryA
EnterCriticalSection
GetTickCount
CreateThread
FreeLibrary

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

winmm

mciSendCommandA
sndPlaySoundA

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ