31177c26d857ae9e8acb4f3a697dc128_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31177c26d857ae9e8acb4f3a697dc128_JaffaCakes118
Size

308KB
MD5

31177c26d857ae9e8acb4f3a697dc128
SHA1

0d35b46ba31c755745935e178778366c498fa811
SHA256

d498772659669b8f01c15ce15a88832def5a9b368b27e2ce68696a00958c92a5
SHA512

d821721527daf49e202f8a0219e21a80877071a9f6f24a1e1634f6c566486f47b727f89bbb569bb5d7f7f4fc76190e814f5bf724a62fc248f013562c139bc682
SSDEEP

6144:tbva5vYBWWeVimnjm4VBTRMT20JTS5zJLMGrRDxH:dvacZPmnjm4nH0CzlTrv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31177c26d857ae9e8acb4f3a697dc128_JaffaCakes118

Files

31177c26d857ae9e8acb4f3a697dc128_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14777e2e68f2ba1adba2046d2088c14e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ReleaseMutex
lstrcpynA
GetDriveTypeA
GetTickCount
CloseHandle
ResetEvent
ReleaseMutex
CreateFileA
FindAtomW
HeapCreate
LoadLibraryW
GetDiskFreeSpaceW
ExitThread
GetComputerNameW
LocalFree
GetFileAttributesA
GetLocalTime
GetCommandLineW
GetModuleHandleW

user32

FillRect
CreateWindowExA
GetMenu
GetDlgItem
GetComboBoxInfo
DrawStateA
GetKeyState
CallWindowProcA
GetClassInfoA
DispatchMessageA
DestroyCaret
CloseWindow
EndDialog

snmpapi

SnmpTfxOpen
SnmpTfxQuery
SnmpTfxClose
SnmpUtilMemAlloc
SnmpUtilMemFree

modemui

CountryRunOnce

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ