3ba6927025547349e99c6ca3a1bec7fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ba6927025547349e99c6ca3a1bec7fb_JaffaCakes118
Size

838KB
MD5

3ba6927025547349e99c6ca3a1bec7fb
SHA1

99f6000e329563936ee0b49a98538edbdf187112
SHA256

601b12c8f23e2b367ada497dab0ea730a52e492716b5e6deecc49c9f541825d2
SHA512

2506d7c65850ffe43eefbcb8606b0e61da4a819ca8a0867aa164e6065333416796419bcb5dfa3630e512ca45754bb9932622a41989907d038330a2f9d02c4ea4
SSDEEP

24576:SLLOfRIcugKk8VsPxXxdk+jwWd0vDnd7FLJEdU88:SLif/WzVsPxXD12Dnd7Ft81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ba6927025547349e99c6ca3a1bec7fb_JaffaCakes118

Files

3ba6927025547349e99c6ca3a1bec7fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62f5278b63283941aed49e7e053453af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
SetEvent
CreateThread
GetSystemTime
GetComputerNameA
CreateFileA
LoadLibraryW
CloseHandle
UnmapViewOfFile
SetLastError
PulseEvent
LocalUnlock
CreateThread
HeapCreate
Sleep
GetCurrentDirectoryA
GetCommandLineW
LocalFree
GetTickCount
lstrlenA

user32

DispatchMessageA
DrawMenuBar
SetFocus
CheckRadioButton
FillRect
GetDlgItem
GetScrollBarInfo
CallWindowProcA
IsWindow
CreateWindowExA
DrawEdge
GetKeyState
GetDC

clbcatq

DowngradeAPL
UpdateFromAppChange
CheckMemoryGates
SetSetupSave
SetupOpen

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE