150a84f5ab2c9c9965895a2cdc3f6b93_JaffaCakes118 | Triage

Sharing

General

Target

150a84f5ab2c9c9965895a2cdc3f6b93_JaffaCakes118
Size

335KB
MD5

150a84f5ab2c9c9965895a2cdc3f6b93
SHA1

00d291e0a2fdce10eb480b275f5b2e13bfaabac8
SHA256

b74e32d8d8da5fdc8c07c10d19a3d29e2b0ec654fbe8397e4e9d1ce871488faa
SHA512

15ca973c243561cedbe9099d9611d2583a314a05cee533e03cbc63c5c370ce177e430590a984db69068fc7943ad5e15958fd3fb5dd059811209c0f1004170bae
SSDEEP

6144:z5AXOZNyD7dzY6VnCRK0Nt1Koif1D+yfHXw2rh4Uy3Gw5j5sxu/0S3abHGuIGahj:cPVCI0rIoUpP/5rKFrV3aHGu1a/ES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
150a84f5ab2c9c9965895a2cdc3f6b93_JaffaCakes118

Files

150a84f5ab2c9c9965895a2cdc3f6b93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b77b2923a5861f52792bef9a955a2e93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
HeapCreate
GetModuleHandleA
GetComputerNameA
FindAtomW
GetTickCount
GetDiskFreeSpaceW
CloseHandle
LocalFree
ResumeThread
LoadLibraryW
GetFileAttributesW
GetSystemTime
SetLastError
CreateFileA
CreateThread
lstrcmpiW
SetEvent
ResetEvent
ReleaseMutex

user32

GetDlgItem
GetClassInfoA
DestroyCaret
CloseWindow
CreateWindowExA
DispatchMessageA
DrawStateA
FillRect
CallWindowProcA
SetFocus
GetClipCursor
GetKeyState
GetComboBoxInfo
MessageBoxA

cryptdlg

DecodeRecipientID
CertConfigureTrustA
CertTrustInit
CertTrustFinalPolicy
CertTrustCertPolicy

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ