d08063f053b490f3b165a27a6fcf7dd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d08063f053b490f3b165a27a6fcf7dd3_JaffaCakes118
Size

393KB
MD5

d08063f053b490f3b165a27a6fcf7dd3
SHA1

008c7a09c03e8a95f37b93a0ae7934873eaa3e75
SHA256

cef2f0f27bc07b8de04a6be4c461672563407bde4f79db497e093ecd47b98ca2
SHA512

d879f3b9acff343bf7e1119836297b4205c8c96aa361b0e4b886491f3ec8a47ab3203c228f36361a8211fdb7547aef61bd8064333eb89f733cf4237859c388c5
SSDEEP

12288:Sog7dUmmLen1G6Lkjr7plWzuDRsVqPL0i:vg7dkenE6Qf7fpuQIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d08063f053b490f3b165a27a6fcf7dd3_JaffaCakes118

Files

d08063f053b490f3b165a27a6fcf7dd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9f64dc4da5bbbd62c6d4eacfd4261cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
LoadLibraryExA
CloseHandle
LocalFree
GlobalUnlock
CreateFileMappingA
GetConsoleCP
WaitForMultipleObjects
GetCalendarInfoA
GetLastError
Sleep
FreeEnvironmentStringsA
GetACP
GetModuleHandleA
LocalLock
FindAtomA
TlsGetValue
HeapCreate
CreateFileA
GetConsoleAliasA

user32

IsWindow
FillRect
CallWindowProcA
CascadeWindows
DrawTextA
GetDlgItem
GetIconInfo
CheckRadioButton
SetFocus
DefWindowProcA
DispatchMessageA
GetDC
DrawEdge
MessageBoxA

setupapi

CM_Add_Range
SetupCloseInfFile
SetupCloseLog
CMP_Report_LogOn
CM_Add_IDA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ