d37a7fc4d4c62bded70ad290dfd1c6bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d37a7fc4d4c62bded70ad290dfd1c6bd_JaffaCakes118
Size

416KB
MD5

d37a7fc4d4c62bded70ad290dfd1c6bd
SHA1

a339d1601c079d8b42c397fd5e7c8ea3aaa09991
SHA256

3269ce5af71d86d365883b811f298f18d1cd74e674fb8c154ecdecc0ed416ed3
SHA512

1a469d70611e6c97743a57bc7c68b0cb6c858683b3e0ce2b6c1feb23691d2470c9b2dbea609d3f75472af37810f607573ba0d093d54e54e7be111f49122aa1c5
SSDEEP

12288:qnG+MdqgNXkNkVhkkuK2Qtm98oQ8wUDXVzwl:bXxCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d37a7fc4d4c62bded70ad290dfd1c6bd_JaffaCakes118

Files

d37a7fc4d4c62bded70ad290dfd1c6bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43174cd82202f613fc8ba310f2e7cfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetEvent
HeapCreate
CloseHandle
ReleaseMutex
GetProcessHeap
GetFileAttributesW
GetCommandLineW
GetDiskFreeSpaceW
GetLocalTime
LoadLibraryW
LoadLibraryA
CreateFileA
FindAtomA
LocalFree
GetComputerNameW
lstrcpynA
GetDriveTypeA
ExitThread
ReleaseMutex

user32

GetComboBoxInfo
SetFocus
GetClipCursor
DispatchMessageA
CreateWindowExA
CloseWindow
DrawStateA
DestroyCaret
GetDlgItem
GetKeyState
GetClassInfoA
FillRect
CallWindowProcA

snmpapi

SnmpTfxClose
SnmpTfxQuery
SnmpTfxOpen
SnmpUtilMemFree
SnmpUtilMemAlloc

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ