dd652b676f68051c9d4cdcfc7ebd510c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd652b676f68051c9d4cdcfc7ebd510c_JaffaCakes118
Size

392KB
MD5

dd652b676f68051c9d4cdcfc7ebd510c
SHA1

ac1803399ca026295f66c2b065980d15bda7577d
SHA256

e05a9ba55c9fb1eaf0254b42ae6b15079c792b4ab555a6e660e9fb2cfca09be1
SHA512

e45139a408dc0b8d724ad465769b18a040518b67e0060eca0eb6481df167fcdc4c82ebbf35213cd07f8a312c443879fc727ad919eac0b41f6a39c2d91b9492bd
SSDEEP

6144:x0MvjeIO8byyWeuGtkMvgfwFeuYvxZoJzv2GpKObrVOAESE7QT4He:OMyIayEukOGwQuYQJjLptVOAXE7QT4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd652b676f68051c9d4cdcfc7ebd510c_JaffaCakes118

Files

dd652b676f68051c9d4cdcfc7ebd510c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d41c1f6acb7d946e5f9aab497fa4987a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
LoadLibraryW
HeapCreate
GetComputerNameA
UnmapViewOfFile
CreateThread
SetLastError
GetCurrentDirectoryA
SetEvent
Sleep
CloseHandle
LocalUnlock
LocalFree
PulseEvent
GetCommandLineW
GetSystemTime
lstrlenA
CreateThread
GetModuleHandleA

user32

DispatchMessageA
GetKeyState
IsWindow
GetScrollBarInfo
GetDlgItem
CallWindowProcA
SetFocus
FillRect
CreateWindowExA
DrawMenuBar
GetDC
DrawEdge
CheckRadioButton

clbcatq

SetSetupSave
SetupOpen
DowngradeAPL
UpdateFromAppChange
CheckMemoryGates

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ