def1bed26c8081905d7eee65748bc057_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

def1bed26c8081905d7eee65748bc057_JaffaCakes118
Size

274KB
MD5

def1bed26c8081905d7eee65748bc057
SHA1

acdf9b93a5c6699252f155d99e9ba89d8a30df55
SHA256

c4a718bd1a441bd29231d3b2c7f60ac3af0d6a32376e76ded7bd742b87079202
SHA512

5bd2e34e77b2d0c18d386e7ca0b4aa908936b42f2e4c9538e626e9a29b520ab9a70e5e18884a32b8149aed91d217d4fd6ec50f8160c63aad93df25bafe0ceaec
SSDEEP

6144:tuosODxJ/z34mUAMKCyO+qZmI0FYR/HL0kpyFhJRp:UojtJr4m3O+qMI6TkI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
def1bed26c8081905d7eee65748bc057_JaffaCakes118

Files

def1bed26c8081905d7eee65748bc057_JaffaCakes118
.exe windows:4 windows x86 arch:x86

658fbe33515576b370bfe2e0def83944

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetCommandLineW
lstrlenA
Sleep
GetSystemTime
CloseHandle
HeapCreate
UnmapViewOfFile
PulseEvent
lstrcpyA
FindClose
GetTickCount
GlobalUnlock
GetComputerNameA
LocalFree
GetCurrentDirectoryA
CreateFileW
GetModuleHandleA
CreateThread
ResetEvent

user32

CreateWindowExA
GetKeyState
GetScrollBarInfo
DrawMenuBar
DispatchMessageA
FillRect
CallWindowProcA
GetDlgItem
SetFocus
CheckRadioButton
DrawEdge
GetDC
IsWindow

cryptui

CryptUIDlgSelectCA
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 234KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ