e22b20298059b70144af1355e087113b_JaffaCakes118 | Triage

Sharing

General

Target

e22b20298059b70144af1355e087113b_JaffaCakes118
Size

299KB
MD5

e22b20298059b70144af1355e087113b
SHA1

15dece6b9ba560c2b2038b118d8304a55b3279fa
SHA256

86439894aab8b2ce93eb02d4c988f22da380a5d1a2792e84ab4a846189104717
SHA512

e13c4685dda94aca29efc77ad2252978752ec7ea84b330ae9a38e94d1fc5c92bad6e6e107b401f90a37b88338b790e77e58d8b93a1ce28fa93b2d357dbe8d86d
SSDEEP

6144:8SOee5wXkh7ekXsht7zaDgVOppwX0PzgYE/YFukTfYOEV0o:ze5xeYshkDgV4U0nE/iumYvuo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e22b20298059b70144af1355e087113b_JaffaCakes118

Files

e22b20298059b70144af1355e087113b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f11ba69d536c859f84c23a311e8b9682

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetComputerNameA
LocalUnlock
lstrlenA
HeapCreate
CloseHandle
GetCommandLineW
LoadLibraryW
SetEvent
GetCurrentDirectoryA
LocalFree
UnmapViewOfFile
GetTickCount
GetModuleHandleA
CreateThread
GetConsoleTitleA
CreateFileA
SetLastError
GetSystemTime
PulseEvent

user32

GetScrollBarInfo
DrawMenuBar
GetKeyState
IsWindow
DispatchMessageA
CreateWindowExA
CheckRadioButton
SetFocus
CallWindowProcA
GetDC
GetDlgItem
FillRect
DrawEdge

clbcatq

DowngradeAPL
SetupOpen
SetSetupOpen
CheckMemoryGates
UpdateFromAppChange

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ