d9d2ca1e1bb3f5ce2e4b2f54682f9b99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9d2ca1e1bb3f5ce2e4b2f54682f9b99_JaffaCakes118
Size

392KB
MD5

d9d2ca1e1bb3f5ce2e4b2f54682f9b99
SHA1

7ce2dc7619354193b2dfae0faa174a07f060a670
SHA256

9802a37617716401d992ecf5a590506c31abe5634d40e3609edbdd7d981bdb0e
SHA512

1f8f963f29fcbbdaa967a02e989c2a7af95a399f878fc424d50f833a7588ce894a4bbe7921e0130c327a42e4526b88ed7167a0d14def26a02f1af68d119f758e
SSDEEP

12288:9d5sTH4JGqud/+GyVod/A0RIhKcGicLo:9d5SSBGyVITRIhKz1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9d2ca1e1bb3f5ce2e4b2f54682f9b99_JaffaCakes118

Files

d9d2ca1e1bb3f5ce2e4b2f54682f9b99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33e3f97295d9d53bb4552aa27301cfa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
SetLastError
GetComputerNameA
LocalFree
CloseHandle
CreateFileA
PulseEvent
GetCurrentDirectoryA
GetTickCount
lstrlenA
LocalUnlock
LoadLibraryExA
CreateThread
GetModuleHandleA
CreateProcessA
GetCommandLineW
UnmapViewOfFile
SetEvent
HeapCreate
Sleep

user32

GetDlgItem
DrawEdge
CallWindowProcA
GetScrollBarInfo
FillRect
CreateWindowExA
GetKeyState
SetFocus
DispatchMessageA
GetDC
DrawMenuBar
CheckRadioButton
IsWindow

clbcatq

SetupOpen
SetSetupSave
CheckMemoryGates
DllGetClassObject
ComPlusMigrate

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ