da2c8bc6928abd277632b64b71bbab9f_JaffaCakes118 | Triage

Sharing

General

Target

da2c8bc6928abd277632b64b71bbab9f_JaffaCakes118
Size

359KB
MD5

da2c8bc6928abd277632b64b71bbab9f
SHA1

2766ca1e9aeb429ff2bd790b1f6c5b5a05f092e9
SHA256

b8c9e05fd9f6814c44008033923dbba6c2af7c6c618ac019ad75328c39bd2d07
SHA512

d2547e94d6c3c114afb53c1e0fdbd1d3c5b1f5f49010b0454d35457ec62d83adbf9390791d9cd94b8d9e607cb4d12c1f5fdfd1a77c5e97643e75c13909b5ef14
SSDEEP

6144:fwEggHb5Wu5ME4Wa2Ez0I8EIGgsVyI2dYblKDsZ00cupI776J6xjoWxwEwr36vZk:IBuDMMaXukVyI2dA5zcKICgDxvwr36vC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da2c8bc6928abd277632b64b71bbab9f_JaffaCakes118

Files

da2c8bc6928abd277632b64b71bbab9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7a20f324c26b1195d89eeaf48493fbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomW
ReleaseMutex
GetLocalTime
CreateFileA
GetDiskFreeSpaceW
GetTickCount
GetFileAttributesA
GetTickCount
LocalFree
LoadLibraryW
ExitThread
ResetEvent
GetDriveTypeA
GetModuleHandleW
HeapCreate
CloseHandle
ReleaseMutex
GetCommandLineW
GetComputerNameW
lstrcpynA

user32

DestroyCaret
GetComboBoxInfo
FillRect
GetKeyState
EndDialog
GetMenu
CloseWindow
CreateWindowExA
DrawStateA
GetDlgItem
GetClassInfoA
CallWindowProcA
DispatchMessageA

snmpapi

SnmpTfxQuery
SnmpUtilMemFree
SnmpTfxOpen
SnmpUtilMemAlloc
SnmpTfxClose

modemui

CountryRunOnce

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ