bb0c96c63b37d73361ff869dbd5cd68d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb0c96c63b37d73361ff869dbd5cd68d_JaffaCakes118
Size

375KB
MD5

bb0c96c63b37d73361ff869dbd5cd68d
SHA1

08ab3899e5ef75b08e7eaa674d11e20f498bbed9
SHA256

b08f4f34cf47064d4a6c174f56a29565e3cd2fb834a1ae4f2dc175facb110efb
SHA512

5011132fc5c9c1f6f8ce4a522e061529f9dd110b26f71a3fe0758ac54a7c8962a0df99ff8c71f5899bc670ceb966937b50b4f70676c4fa4f8c40aeb43a73005f
SSDEEP

6144:mTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOlxGNU:m/snlM/jzTAV/3alqvU84xRXmY4UN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb0c96c63b37d73361ff869dbd5cd68d_JaffaCakes118

Files

bb0c96c63b37d73361ff869dbd5cd68d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abc9e5f3f262951f6c07212a7387d9fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetComputerNameA
GetCommandLineW
GetSystemTime
PulseEvent
GetCurrentDirectoryA
GlobalUnlock
lstrlenA
GetTickCount
ResetEvent
Sleep
CreateFileW
HeapCreate
GetModuleHandleA
LoadLibraryW
LocalFree
UnmapViewOfFile
FindClose
CloseHandle
lstrcatA

user32

GetDC
CheckRadioButton
CallWindowProcA
DrawEdge
DispatchMessageA
GetKeyState
GetDlgItem
CreateWindowExA
IsWindow
SetFocus
GetScrollBarInfo
DrawMenuBar
FillRect

clbcatq

SetupOpen
DowngradeAPL
SetSetupOpen
UpdateFromAppChange
CheckMemoryGates

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ