fefc6401e5dbccf2298e4bb1ae31432e_JaffaCakes118 | Triage

Sharing

General

Target

fefc6401e5dbccf2298e4bb1ae31432e_JaffaCakes118
Size

416KB
MD5

fefc6401e5dbccf2298e4bb1ae31432e
SHA1

a7239df57f62158325035286ffb12e931a6d8869
SHA256

dfaf278fd5f9f26993cb474bb6fcf895709491da330618b42b0667c433c8f3c9
SHA512

1cb554d5f310e03569f99aed618ce7d6c27dc597175b7d2f67095397a57db2fcef36cc6468be5ac144692e5d287be05506a1f9065b7ac03abd72cad5684ba7e3
SSDEEP

12288:qnA+MdqgNXkNkVhkkuK2Qtm98oQ8wUDXVzwl:lXxCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fefc6401e5dbccf2298e4bb1ae31432e_JaffaCakes118

Files

fefc6401e5dbccf2298e4bb1ae31432e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43174cd82202f613fc8ba310f2e7cfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetEvent
HeapCreate
CloseHandle
ReleaseMutex
GetProcessHeap
GetFileAttributesW
GetCommandLineW
GetDiskFreeSpaceW
GetLocalTime
LoadLibraryW
LoadLibraryA
CreateFileA
FindAtomA
LocalFree
GetComputerNameW
lstrcpynA
GetDriveTypeA
ExitThread
ReleaseMutex

user32

GetComboBoxInfo
SetFocus
GetClipCursor
DispatchMessageA
CreateWindowExA
CloseWindow
DrawStateA
DestroyCaret
GetDlgItem
GetKeyState
GetClassInfoA
FillRect
CallWindowProcA

snmpapi

SnmpTfxClose
SnmpTfxQuery
SnmpTfxOpen
SnmpUtilMemFree
SnmpUtilMemAlloc

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ