5467aedcafaec9ba49342a810d763f77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5467aedcafaec9ba49342a810d763f77_JaffaCakes118
Size

170KB
MD5

5467aedcafaec9ba49342a810d763f77
SHA1

af4f7e499c7ca525d379f2fc8ca360142fa121a5
SHA256

a846444d7c2ccbca4cf09dc0d1167804928c3aa48a1032b74022ebeef8ee611f
SHA512

fdac5602c6cc25034b0fd39fc38f5fc83a2a343caaeb4629de5916723dcaca3442efe8037f733820081a04b735de2b4d0499b453aa35a12c1264aeab12ad8a50
SSDEEP

3072:Qc4dggdLZsjOPyzr2pQNidnLT3WQ/sAg7vxyQg9wN9EFgugcmTmp17WGU+AH0:Qz9LZsKP05WnXcv5yj6Njcf7FUNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5467aedcafaec9ba49342a810d763f77_JaffaCakes118

Files

5467aedcafaec9ba49342a810d763f77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56a81e2da83f922fec9fef816c43f550

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
lstrcpyA
Sleep
GlobalAddAtomW
GetFullPathNameW
SetEvent
CreateThread
GetTimeZoneInformation
LoadLibraryW
WaitForSingleObject
ResetEvent
GetTempPathA
EnumResourceNamesA
FileTimeToSystemTime
VerLanguageNameA
LoadLibraryA
OutputDebugStringA
GetFullPathNameA
EnterCriticalSection
DeleteCriticalSection
GetTickCount
LeaveCriticalSection
GetProcAddress
IsDBCSLeadByte
FreeLibrary

winmm

mciSendCommandA
sndPlaySoundA

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ