280857eb1c53ed668885480e5ab5b7ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

280857eb1c53ed668885480e5ab5b7ff_JaffaCakes118
Size

172KB
MD5

280857eb1c53ed668885480e5ab5b7ff
SHA1

f26ed308ed9972b053fd3e0b6d5124c4b506281e
SHA256

784d531c1f74a633ef6d95bc48e5c558f55ab0472e606b0202ab441bb89ba367
SHA512

b7fef87ab96ac65981b780e9bb6dd020eed69c03ce509f306657b9b241c859fe1f4d38b097eedd929715c3051fd979460b07d8be19a30b7957bf2de792184eda
SSDEEP

3072:IUWU+9KHAF7i873mvGgUrjjC27P1mPqcdw2f1M+S3oMdT//0cYdL7yetlp:nWUWKgV3WJqb7PMHdpEoMdYFvJtr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
280857eb1c53ed668885480e5ab5b7ff_JaffaCakes118

Files

280857eb1c53ed668885480e5ab5b7ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

514c078e1b1f9bd3515888f9a39ff84c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA
sndPlaySoundA

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GlobalAddAtomW
OutputDebugStringA
GetTempPathA
SetEvent
ResetEvent
InitializeCriticalSection
LoadLibraryA
GetFullPathNameW
WaitForSingleObject
Sleep
FileTimeToSystemTime
GetProcAddress
IsDBCSLeadByte
EnumResourceNamesA
VerLanguageNameA
lstrcpyA
DeleteCriticalSection
GetFullPathNameA
LeaveCriticalSection
CreateThread
GetTickCount
GetTimeZoneInformation
EnterCriticalSection
LoadLibraryW
FreeLibrary

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ