c089065b5b4a2d5c7c8e66bb10c57a7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c089065b5b4a2d5c7c8e66bb10c57a7e_JaffaCakes118
Size

375KB
MD5

c089065b5b4a2d5c7c8e66bb10c57a7e
SHA1

a46a321056f05c9325ee6f3a6f48ef6e6557b381
SHA256

1fbf694421d885b04d9afac338c777d57159541741f0362c9023af70ec6a81c3
SHA512

d0ca33b8d5a72b5dbb0ecb78ec6c49a9cf53addb6fec619b928b56348520d7c093c8efb83667c09221d829d02e7c9a2eddffb8280264059a8b823b115a41d04b
SSDEEP

6144:uTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOlLW:u/snlM/jzTAV/3alqvU84xRXmY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c089065b5b4a2d5c7c8e66bb10c57a7e_JaffaCakes118

Files

c089065b5b4a2d5c7c8e66bb10c57a7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ce84b2b58c235e8323029aa6e7f9c7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GlobalUnlock
CreateThread
FindClose
Sleep
ResetEvent
CloseHandle
HeapCreate
CreateFileW
LoadLibraryW
UnmapViewOfFile
GetComputerNameA
GetModuleHandleA
lstrlenA
GetSystemTime
LocalFree
lstrcatA
GetTickCount
GetCurrentDirectoryA
PulseEvent

user32

CallWindowProcA
IsWindow
CheckRadioButton
DispatchMessageA
DrawEdge
SetFocus
GetScrollBarInfo
GetDlgItem
DrawMenuBar
GetKeyState
CreateWindowExA
GetDC
FillRect

clbcatq

UpdateFromAppChange
CheckMemoryGates
DowngradeAPL
SetSetupOpen
SetupOpen

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ