d10014de4947eca8f1d9488f74d32f5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d10014de4947eca8f1d9488f74d32f5c_JaffaCakes118
Size

774KB
MD5

d10014de4947eca8f1d9488f74d32f5c
SHA1

e687d96f8c899f72e6c1397e36ce7e3709c5fa99
SHA256

6001ba91b5b7e2f82e66387c8959002144752313f330e20c645ed0e5623549df
SHA512

513e3748add22f54cdb25cfb3f9e90a62dba2387cc91d562a6b044d51f963983d596b8ecac61b6a3e6bcf63a7f6583513dc00d26a1baac452cf029fa1727eb4e
SSDEEP

12288:kB8/pJnAaG2PvZDEFIr6QnKIx3bQ4HbkxTVXIQ+gRraPUm++jSEQRPzVaB2zjwE:kapJnAaG2QonKIxf4TVXblLCSEQRPHb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d10014de4947eca8f1d9488f74d32f5c_JaffaCakes118

Files

d10014de4947eca8f1d9488f74d32f5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3bda9b5fdf28e69755c0c67ce9651f54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
UnmapViewOfFile
CreateFileW
Sleep
GetCommandLineW
GlobalUnlock
CreateThread
ResetEvent
GetTickCount
FindClose
GetModuleHandleA
CloseHandle
GetSystemTime
GetComputerNameA
PulseEvent
LoadLibraryW
lstrcpyA
LocalFree
lstrlenA
HeapCreate

user32

GetScrollBarInfo
CreateWindowExA
GetDlgItem
SetFocus
FillRect
GetKeyState
CallWindowProcA
DrawEdge
GetDC
CheckRadioButton
DrawMenuBar
DispatchMessageA
IsWindow

cryptui

WizardFree
CryptUIDlgCertMgr
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE