066596053c93915484eb603eb92341de_JaffaCakes118 | Triage

Sharing

General

Target

066596053c93915484eb603eb92341de_JaffaCakes118
Size

393KB
MD5

066596053c93915484eb603eb92341de
SHA1

5c3f34729d137520fe1260587545ffbb927214e6
SHA256

eb9b074fa6b92c931d347400c5c388c76c1eb85bc45615af377c67a3cce2fde7
SHA512

e2e7cd45f3feac8971b02756df66b7c3cafc232e5db705fb30d9dad5b68bc4f6ddffaeb176c3cb26adbd49586c9379661ca865c140811a00e254e1b973c59c63
SSDEEP

12288:Sg7dUmmLen1G6Lkjr7plWzuDRsVqHKk0Cx:Sg7dkenE6Qf7fpuxXCx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066596053c93915484eb603eb92341de_JaffaCakes118

Files

066596053c93915484eb603eb92341de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4fd578556cfca6d7635943dcd4a8053

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetModuleHandleA
WaitForMultipleObjects
Sleep
FindClose
GetConsoleCP
LocalFree
GetCalendarInfoA
GetConsoleAliasA
TlsGetValue
LocalLock
GetLastError
CreateFileMappingA
FreeEnvironmentStringsA
FindAtomA
CreateFileA
GetACP
LoadLibraryExA
HeapCreate
CloseHandle

user32

DefWindowProcA
GetDC
GetIconInfo
DrawTextA
DispatchMessageA
GetDlgItem
FillRect
CascadeWindows
SetFocus
CallWindowProcA
CheckRadioButton
IsWindow
DrawEdge
MessageBoxA

setupapi

SetupCloseLog
CM_Add_IDA
CM_Add_Range
CMP_Report_LogOn
SetupCloseInfFile

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ