d2b287e4fce539db591b42bfaf5bad8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2b287e4fce539db591b42bfaf5bad8a_JaffaCakes118
Size

187KB
MD5

d2b287e4fce539db591b42bfaf5bad8a
SHA1

e97258a6a49ba4f6ea4f0b94fcdb13ca013e0a0c
SHA256

cdfcf1c603359634487e7d42046bae8ea071042d963fc2b7632a2cc82059ec51
SHA512

4b39852af185608b49373d164401a319c4185cb9b7359472435ce85bc391271a5b63f8a606e34e5c0f1dd4f8dd122037992fb4f77df3a8d3d14586e32839d5fd
SSDEEP

3072:n3+GkiOl/h1eUA39DBa/3jIzXos+VxPRlI5CX1J4O7OHJY/x:nuRiOl/e139tEPV74Cv4O7sYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2b287e4fce539db591b42bfaf5bad8a_JaffaCakes118

Files

d2b287e4fce539db591b42bfaf5bad8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

614ac8c5b08c0fe7f8ae0f98384dbe01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAddBackslashA

msimg32

AlphaBlend
TransparentBlt

winmm

mciSendCommandA
sndPlaySoundA

kernel32

GlobalAddAtomW
ResetEvent
LoadLibraryA
EnterCriticalSection
GetFullPathNameW
LoadLibraryW
GetTimeZoneInformation
GetTempPathA
LeaveCriticalSection
OutputDebugStringA
SetEvent
IsDBCSLeadByte
EnumResourceNamesA
GetTickCount
Sleep
GetProcAddress
WaitForSingleObject
VerLanguageNameA
FileTimeToSystemTime
lstrcpyA
DeleteCriticalSection
InitializeCriticalSection
GetFullPathNameA
CreateThread
FreeLibrary

setupapi

InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ