bff7fc8ae35aa8c49b89a7d997ff80f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff7fc8ae35aa8c49b89a7d997ff80f2_JaffaCakes118
Size

373KB
MD5

bff7fc8ae35aa8c49b89a7d997ff80f2
SHA1

28f70a8a21d88a0f511121167e4dbdb0e4c67020
SHA256

aa24ad5244e6db89e10487f2887691511196624ecd519af73a8013c2611533b0
SHA512

1536830000198869e3615d87dccf797448a99cfd48c95957d037e6790d12da8083af71afc78edd81249420a6fb69aabc5fc41e7f19b555ecdfada7cdddd077af
SSDEEP

6144:AUw0Nr8TwqmT40LN8riDFwrqpFu35sGn6aE/OKGqIKurlvN2+H/f:AkNQwqmsR4Fu35sKwOKG1KA11/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff7fc8ae35aa8c49b89a7d997ff80f2_JaffaCakes118

Files

bff7fc8ae35aa8c49b89a7d997ff80f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f937c8c15eab95f5092122645115695a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetCurrentDirectoryA
lstrcpyA
GetSystemTime
GetCurrentThreadId
ResetEvent
GetCommandLineW
lstrlenA
PulseEvent
CloseHandle
GetModuleHandleA
LocalFree
Sleep
LoadLibraryW
CreateFileW
GetComputerNameA
FindClose
UnmapViewOfFile
CreateThread
HeapCreate

user32

CheckRadioButton
GetDC
CreateIcon
FillRect
GetDlgItem
GetCaretPos
CreateWindowExA
SetFocus
IsWindow
DispatchMessageA
DrawMenuBar
DrawEdge
CallWindowProcA

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
LocalEnroll

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ