ebf3a67c3a15644ed7431fbf094bd83c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebf3a67c3a15644ed7431fbf094bd83c_JaffaCakes118
Size

392KB
MD5

ebf3a67c3a15644ed7431fbf094bd83c
SHA1

e5a09fc56fc727625ef4198eca0a0b6389997052
SHA256

1bd2eb42abb33e6f0bd3aadc1e3201a9e8cd2d603f6b43a8d9a3b56db50a4051
SHA512

604642bf8a736023cd2253cba8165b360f7fc3ff05d8d78337dd4090e7aacad608110da4be7760eeceb0b2372999a93c22745bc88903c0a9d6cd5677984f69c9
SSDEEP

12288:hd5sTH4JGqud/+GyVod/A0RIhKcGicLo:hd5SSBGyVITRIhKz1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf3a67c3a15644ed7431fbf094bd83c_JaffaCakes118

Files

ebf3a67c3a15644ed7431fbf094bd83c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1add3b427afe3f3fca5b43ad5e37dacd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
FindVolumeClose
HeapCreate
LoadLibraryExW
LocalFree
UnmapViewOfFile
lstrlenA
CreateThread
GetModuleHandleA
GetTickCount
SetEvent
GetSystemTime
GetComputerNameA
SetLastError
GetCommandLineW
Sleep
CloseHandle
GetCurrentDirectoryA
LocalUnlock
CreateFileA

user32

GetDC
FillRect
CallWindowProcA
CreateWindowExA
DrawEdge
IsWindow
SetFocus
GetDlgItem
CheckRadioButton
GetComboBoxInfo
DispatchMessageA
GetKeyState
DrawMenuBar

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
CryptUIDlgCertMgr
LocalEnroll
WizardFree

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ