f0cfa6f409cb9ce396e9ead9f65341e1_JaffaCakes118 | Triage

Sharing

General

Target

f0cfa6f409cb9ce396e9ead9f65341e1_JaffaCakes118
Size

392KB
MD5

f0cfa6f409cb9ce396e9ead9f65341e1
SHA1

962b9d99720320a91e0c36632e11f1e7ca0b5baf
SHA256

bf879f95c5208ddbf6047bc7a5f06fcf362532c211569f629bce07218bc9742c
SHA512

5b9190ead975ba57cb3e7f5e51e8253ed14697ed7572b23757acf5ab47fba94fd0b34f3e24a3518e029444b6c4de71a91069b2ffd34512d12c49a4a9a371f4d8
SSDEEP

12288:hd5sTH4JGqud/+GyVod/A0RIhKcGicLo:hd5SSBGyVITRIhKz1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0cfa6f409cb9ce396e9ead9f65341e1_JaffaCakes118

Files

f0cfa6f409cb9ce396e9ead9f65341e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1add3b427afe3f3fca5b43ad5e37dacd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
FindVolumeClose
HeapCreate
LoadLibraryExW
LocalFree
UnmapViewOfFile
lstrlenA
CreateThread
GetModuleHandleA
GetTickCount
SetEvent
GetSystemTime
GetComputerNameA
SetLastError
GetCommandLineW
Sleep
CloseHandle
GetCurrentDirectoryA
LocalUnlock
CreateFileA

user32

GetDC
FillRect
CallWindowProcA
CreateWindowExA
DrawEdge
IsWindow
SetFocus
GetDlgItem
CheckRadioButton
GetComboBoxInfo
DispatchMessageA
GetKeyState
DrawMenuBar

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
CryptUIDlgCertMgr
LocalEnroll
WizardFree

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ