1045c9030844ccef45b15bd6292e6d85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1045c9030844ccef45b15bd6292e6d85_JaffaCakes118
Size

375KB
MD5

1045c9030844ccef45b15bd6292e6d85
SHA1

210453590295db6547aee40ec9137c706bad6b55
SHA256

bff53f3ffd91036332810ecbfc8b6928e5e82d914109ec3bf467f3d256db6955
SHA512

495d19359235c499578ee7861e9fa64ac07524c4c692800592960973d9109bbeaa954b36f67e0d30a7fe133253582951b3ce9b7459e6459fa046eadb89a6bdff
SSDEEP

6144:aaxTh86sfb2BVpk9kcDj3glx6OIpOR5xI0mqtjDIyyco6s1M:aWTBsMWOcwlQg5xMwjDItIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1045c9030844ccef45b15bd6292e6d85_JaffaCakes118

Files

1045c9030844ccef45b15bd6292e6d85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da77b0e1a1035770f510e6e833865199

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
LoadLibraryW
LocalFree
HeapCreate
GetCurrentDirectoryA
lstrcpyA
FindClose
Sleep
CreateThread
lstrlenA
GetCurrentThreadId
GlobalUnlock
GetCommandLineA
CreateFileW
GetSystemTime
CloseHandle
GetModuleHandleA
ResetEvent
UnmapViewOfFile
GetComputerNameA

user32

CreateIcon
GetCaretPos
DrawEdge
SetFocus
GetDlgItem
DrawMenuBar
IsWindow
DispatchMessageA
FillRect
CreateWindowExA
CheckRadioButton
GetDC
CallWindowProcA

cryptui

CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
LocalEnroll
CryptUIDlgSelectCA
WizardFree

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ