fa3731fddb9d797b24f9b744dd042a73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa3731fddb9d797b24f9b744dd042a73_JaffaCakes118
Size

393KB
MD5

fa3731fddb9d797b24f9b744dd042a73
SHA1

effc898beb12dcc7684725bc3165f7d8152bfe1b
SHA256

589d002853f6c110f26ef20b2d0e2f38915ce07e040b0b5e7fb217abd433d27d
SHA512

e7bd973babda79e861f3866c9a52720fffd8711f94efe001da28ee8dfdd77373254baefe5013939de2cabdaf38b402634455f1f7f4799163f869f2615fa4d840
SSDEEP

6144:Uxg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7924J:qg7dUmmLen1G6Lkjr7plWzuDRsVq17t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa3731fddb9d797b24f9b744dd042a73_JaffaCakes118

Files

fa3731fddb9d797b24f9b744dd042a73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

081e4aa261b112d416b3ec5a8b8d45e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
LocalFree
GetConsoleAliasA
HeapCreate
FindClose
GetModuleHandleA
GetConsoleCP
CreateFileMappingA
GlobalUnlock
GetCalendarInfoA
CloseHandle
LocalLock
FreeEnvironmentStringsA
GetACP
TlsGetValue
GetLastError
FindAtomA
CreateFileA
Sleep
WaitForMultipleObjects

user32

DrawEdge
SetFocus
DispatchMessageA
FillRect
GetDC
CheckRadioButton
GetDlgItem
CascadeWindows
DefWindowProcA
CallWindowProcA
DrawTextA
GetIconInfo
IsWindow
MessageBoxA

setupapi

CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA
SetupCloseLog
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ