fa73eeb2504a9d9e7e66f1b14513971e_JaffaCakes118 | Triage

Sharing

General

Target

fa73eeb2504a9d9e7e66f1b14513971e_JaffaCakes118
Size

396KB
MD5

fa73eeb2504a9d9e7e66f1b14513971e
SHA1

93086e88dca29dfc675e9853ed21782c62dc2f4e
SHA256

90e8a5f1f556dbf9e828414fb53e149571cc277818a2eaf4fd93b2c228063809
SHA512

2dc5337dc88b2eca5fae53ca28469f91a09a63cb7320da7b50bc54893663904a92d000b5ea1f8e01e0993669bd9fa2627f29181b66d47a3e5cc5e4770f3e8fdd
SSDEEP

6144:/QMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCD8:WrBxsptlK8D2JPHcGHXWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa73eeb2504a9d9e7e66f1b14513971e_JaffaCakes118

Files

fa73eeb2504a9d9e7e66f1b14513971e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8aebed9ae2d49aed12945300abecd3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
ResetEvent
GetComputerNameA
LocalFree
CloseHandle
CreateFileW
PulseEvent
GetCurrentDirectoryA
GetTickCount
lstrlenA
GlobalUnlock
LoadLibraryW
CreateThread
GetModuleHandleA
lstrcpyA
GetCommandLineW
UnmapViewOfFile
FindClose
HeapCreate
Sleep

user32

GetDlgItem
DrawEdge
CallWindowProcA
CreateIcon
FillRect
CreateWindowExA
GetCaretPos
SetFocus
DispatchMessageA
GetDC
DrawMenuBar
CheckRadioButton
IsWindow

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ