dc8fb023372fe91e96f509faacb3c919_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc8fb023372fe91e96f509faacb3c919_JaffaCakes118
Size

328KB
MD5

dc8fb023372fe91e96f509faacb3c919
SHA1

ef0ad085b12ca0d3f4384c4e357f41d8c0d9aa87
SHA256

f4cc1913f8a6e55fab9fb65ef33c2e9b63437e0219bf79259a612b186ba8be3f
SHA512

5598d75e1026683ba7daceded90e28429352ecb5e3c7435c6fdbed3f87be9db5b0d16d4236568c7969e6eea419a53bf85ae1c4138b8b9dbcdabcdb2ccfd1afc8
SSDEEP

6144:aAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4ak:z9Y5ioSsC5+BIK4Tg9EEigRk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc8fb023372fe91e96f509faacb3c919_JaffaCakes118

Files

dc8fb023372fe91e96f509faacb3c919_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e940bf1bc7ce59d25b220ef4ddf919cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetModuleHandleA
GetCurrentDirectoryA
GetCommandLineW
LoadLibraryW
LocalUnlock
Sleep
lstrlenA
PulseEvent
CreateFileA
LocalFree
CreateThread
CloseHandle
SetEvent
GetComputerNameA
GetConsoleTitleA
GetTickCount
GetSystemTime
UnmapViewOfFile
SetLastError

user32

CallWindowProcA
SetFocus
CheckRadioButton
DrawMenuBar
GetScrollBarInfo
IsWindow
GetDlgItem
DrawEdge
CreateWindowExA
DispatchMessageA
FillRect
GetKeyState
GetDC

clbcatq

DowngradeAPL
SetSetupOpen
SetupOpen
CheckMemoryGates
UpdateFromAppChange

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ