1572ca1f81d297bebb67718fa8e01770_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1572ca1f81d297bebb67718fa8e01770_JaffaCakes118
Size

304KB
MD5

1572ca1f81d297bebb67718fa8e01770
SHA1

2df778a50529e4d5616788c01b0a502fa83d6372
SHA256

ea554e313eada276dc10b240f97fb2516350861b14984b34a8447750a1cf8e08
SHA512

63b351ed355dadfc7a9be185d5d353707da4266548887914c3c776f5abef5053f793a56f49776e0bed1512bc61f8b95d0aca8f246294e6dd0c7fd281857beebc
SSDEEP

6144:xtfxt4kJAtonL5njDMaYMmICJJ5a4j7gyynJPc3ZJ3rSzw9FZzlpeXmdFA:bxDAtonLhjDNBgpX+nJKzGwT1Hyo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1572ca1f81d297bebb67718fa8e01770_JaffaCakes118

Files

1572ca1f81d297bebb67718fa8e01770_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8bfb39f3299e6745c8ef07af7ad47b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GlobalFree
CloseHandle
TlsGetValue
GetLocalTime
GetPrivateProfileIntA
GetComputerNameA
GetModuleHandleW
GetFileAttributesA
FindClose
SetLastError
lstrlenW
GetStdHandle
GetTickCount
CreateFileMappingW
FindAtomA
MapViewOfFile
TlsAlloc
VirtualAlloc
ExitProcess

user32

DestroyCaret
DrawStateA
GetClassInfoA
EndDialog
GetCaretPos
CallWindowProcA
GetClientRect
GetMenu
DispatchMessageA
CreateWindowExA
FillRect
GetDlgItem
CloseWindow

cryptui

LocalEnroll
CryptUIDlgCertMgr
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree

ir50_32

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ