184f6a7efff6d29be1288559c9fe4380_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

184f6a7efff6d29be1288559c9fe4380_JaffaCakes118
Size

299KB
MD5

184f6a7efff6d29be1288559c9fe4380
SHA1

01ab47eb51c81d11125173acecbc5d701fa6637d
SHA256

895ac6809cc14566d2cae14fbb65f4388c9c6ade7bef5808d37c7af026b01903
SHA512

bfb3c51221f185fac364b02884f751d767fe47362593ab0c9c1220f13b1f1cd9ba519c4daf137e973a1395a77121dc4e7399d8ab2e19c0b4776f189ac4493210
SSDEEP

6144:BCdSogUE/aLE/DqYZNF46HWRRyBs6N+cme8bUFMiZtb5S85W68:BCdSR/aLQW6H0yBsum4FMiZF5S85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
184f6a7efff6d29be1288559c9fe4380_JaffaCakes118

Files

184f6a7efff6d29be1288559c9fe4380_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52e7ecd450ea4c96139a1a408e844c99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
CreateFileA
LocalUnlock
LoadLibraryW
CloseHandle
CreateThread
CreateThread
GetModuleHandleA
GetTickCount
UnmapViewOfFile
PulseEvent
GetSystemTime
Sleep
HeapCreate
GetComputerNameA
GetCurrentDirectoryA
GetCommandLineW
SetLastError
LocalFree
lstrlenA

user32

FillRect
DispatchMessageA
SetFocus
IsWindow
GetDC
CallWindowProcA
GetKeyState
CheckRadioButton
DrawEdge
GetDlgItem
DrawMenuBar
GetScrollBarInfo
CreateWindowExA

clbcatq

CheckMemoryGates
SetSetupSave
UpdateFromAppChange
SetupOpen
DowngradeAPL

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ