fc8fc8514c35ce0e90d485c1fefd660b_JaffaCakes118 | Triage

Sharing

General

Target

fc8fc8514c35ce0e90d485c1fefd660b_JaffaCakes118
Size

396KB
MD5

fc8fc8514c35ce0e90d485c1fefd660b
SHA1

c94f9dfa77a921ae6231ab7b96172fe624adcd83
SHA256

b075f8e21104f5b1cf0153d07e2f98fc7f7434d044f5ffe7247403045e2d6d64
SHA512

9d7113bb142eaef81f4e6493f4a6c65e85d682d8ab76bc914447eba3470cfa0ed744ef54326dbf8eb0799f0414b8dd6084a585f05784d6704028bd1e383f4e33
SSDEEP

6144:DQMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCDO:SrBxsptlK8D2JPHcGHXWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc8fc8514c35ce0e90d485c1fefd660b_JaffaCakes118

Files

fc8fc8514c35ce0e90d485c1fefd660b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8aebed9ae2d49aed12945300abecd3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
ResetEvent
GetComputerNameA
LocalFree
CloseHandle
CreateFileW
PulseEvent
GetCurrentDirectoryA
GetTickCount
lstrlenA
GlobalUnlock
LoadLibraryW
CreateThread
GetModuleHandleA
lstrcpyA
GetCommandLineW
UnmapViewOfFile
FindClose
HeapCreate
Sleep

user32

GetDlgItem
DrawEdge
CallWindowProcA
CreateIcon
FillRect
CreateWindowExA
GetCaretPos
SetFocus
DispatchMessageA
GetDC
DrawMenuBar
CheckRadioButton
IsWindow

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ