b9a76c8014d5bc687aee114933571eee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9a76c8014d5bc687aee114933571eee_JaffaCakes118
Size

393KB
MD5

b9a76c8014d5bc687aee114933571eee
SHA1

efd352b84a19808cffac31f7a5e6db010cda8fce
SHA256

49ef742d53b66b97fc64ee41f14173233c151b1aa10e930a977e0d5510afc800
SHA512

c6154a0aa6e99ff1357e9bd89fbbd735c48da9066258a9825af3efdd6554e146bbf15019eb6d6cac7749159d873e2074188bd3efc7732255eaba1abdbfec63a2
SSDEEP

12288:zuh/g7dUmmLen1G6Lkjr7plWzuDRsVqp/v9:aJg7dkenE6Qf7fpue9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a76c8014d5bc687aee114933571eee_JaffaCakes118

Files

b9a76c8014d5bc687aee114933571eee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f3b318fd757cc7487cb3ca45d6b115c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
LoadLibraryExA
LocalLock
GetConsoleAliasA
CreateFileMappingA
GetModuleHandleA
LocalFree
GetLastError
Sleep
TlsGetValue
GetConsoleCP
CloseHandle
HeapCreate
GlobalUnlock
CreateFileA
FindAtomA
FindClose
GetACP
WaitForMultipleObjects
FreeEnvironmentStringsA

user32

SetFocus
DefWindowProcA
CallWindowProcA
FillRect
IsWindow
CheckRadioButton
CascadeWindows
GetIconInfo
DrawTextA
GetDC
GetDlgItem
DrawEdge
DispatchMessageA
MessageBoxA

setupapi

CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ