0f894eae056523c1307fc33f51e6564a_JaffaCakes118 | Triage

Sharing

General

Target

0f894eae056523c1307fc33f51e6564a_JaffaCakes118
Size

326KB
MD5

0f894eae056523c1307fc33f51e6564a
SHA1

04465290845ac18ab91ce96588003f85f0a53f95
SHA256

cd14185be599d5acb80defeb79db3409f6211e8caee11a07620b9919fd8336f5
SHA512

fae2585f024e58c622c42bf82b72779eb06c7aee0a3474b69095e3e5f82de4f1f44792ba8015d4e2b060101d8e785e141d77a2bd3e679c7eefefc2653fa15f64
SSDEEP

6144:8qwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnrz:OO1xm+QoK0t4K3gCTDYWGrYzt+NSTn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f894eae056523c1307fc33f51e6564a_JaffaCakes118

Files

0f894eae056523c1307fc33f51e6564a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5503e9956c1af273083e95a462a8b1f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
CreateThread
HeapCreate
LocalFree
Sleep
CreateFileA
GetDateFormatA
ResetEvent
LoadLibraryW
FindVolumeClose
SetLastError
GetTickCount
GetComputerNameA
GetModuleHandleA
GetSystemTime
GetDiskFreeSpaceA
CloseHandle
UnmapViewOfFile
LocalUnlock
lstrlenA

user32

FillRect
GetDC
GetDlgItem
GetComboBoxInfo
DrawEdge
SetFocus
IsWindow
CreateWindowExA
CallWindowProcA
CheckRadioButton
DrawStateA
DispatchMessageA
DrawMenuBar

advapi32

FreeSid
RegCloseKey
RegDeleteKeyA
IsTokenUntrusted
RegEnumValueA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ