e079f891764e6b639b4ac6d39c6056ee_JaffaCakes118 | Triage

Sharing

General

Target

e079f891764e6b639b4ac6d39c6056ee_JaffaCakes118
Size

396KB
MD5

e079f891764e6b639b4ac6d39c6056ee
SHA1

4e4a927f268125fd82934a6e052c8ff868d18c09
SHA256

6255b8b7cd3e55ce567e35604f2b14eb4e88212cb1ac2bad8e491b7fea1a2dc0
SHA512

6da3ea859419e3ef8e07162a4e1c57e4d761e828a01aadbbfdc10be2cb7a229be8bd51f95b8b8c4aeab5ac49dd1affe9755fe05426ba7d58d1af884f670fa0a5
SSDEEP

6144:OCMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCD1:rrBxsptlK8D2JPHcGHXWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e079f891764e6b639b4ac6d39c6056ee_JaffaCakes118

Files

e079f891764e6b639b4ac6d39c6056ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

639f03dae96c97c48e6afd99c93c3874

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetTickCount
CreateThread
PulseEvent
GetModuleHandleA
CloseHandle
lstrlenA
LoadLibraryW
HeapCreate
LocalFree
GetCommandLineW
lstrcpyA
Sleep
FindClose
CreateFileW
GlobalUnlock
ResetEvent
GetSystemTime
GetComputerNameA
UnmapViewOfFile

user32

DrawMenuBar
FillRect
GetDlgItem
CreateWindowExA
GetDC
IsWindow
DispatchMessageA
GetCaretPos
SetFocus
CheckRadioButton
DrawEdge
CreateIcon
CallWindowProcA

cryptui

LocalEnroll
WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ