ffcc07fa33d2a64c1e77f424cd3959eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffcc07fa33d2a64c1e77f424cd3959eb_JaffaCakes118
Size

393KB
MD5

ffcc07fa33d2a64c1e77f424cd3959eb
SHA1

9169a635ab365371d591c5116ee0a8efa676e906
SHA256

3b10998082ea4bdc537d551731ad287ad6f0da7c3571ba09235c61dbad049269
SHA512

8c4e4cb8b081bb4c041d63de435ff0c6347249469589dd0f40dfad156b98c902cc45924bd3619a71343b2fed3d66a888f1448ed962af06d4a4b017f0214a6374
SSDEEP

12288:Juh/g7dUmmLen1G6Lkjr7plWzuDRsVqp/v9:oJg7dkenE6Qf7fpue9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffcc07fa33d2a64c1e77f424cd3959eb_JaffaCakes118

Files

ffcc07fa33d2a64c1e77f424cd3959eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f3b318fd757cc7487cb3ca45d6b115c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
LoadLibraryExA
LocalLock
GetConsoleAliasA
CreateFileMappingA
GetModuleHandleA
LocalFree
GetLastError
Sleep
TlsGetValue
GetConsoleCP
CloseHandle
HeapCreate
GlobalUnlock
CreateFileA
FindAtomA
FindClose
GetACP
WaitForMultipleObjects
FreeEnvironmentStringsA

user32

SetFocus
DefWindowProcA
CallWindowProcA
FillRect
IsWindow
CheckRadioButton
CascadeWindows
GetIconInfo
DrawTextA
GetDC
GetDlgItem
DrawEdge
DispatchMessageA
MessageBoxA

setupapi

CMP_Report_LogOn
CM_Add_Range
SetupCloseLog
SetupCloseInfFile
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ