fd3fa6e12fe9133773313ba9f08cbab2_JaffaCakes118 | Triage

Sharing

General

Target

fd3fa6e12fe9133773313ba9f08cbab2_JaffaCakes118
Size

171KB
MD5

fd3fa6e12fe9133773313ba9f08cbab2
SHA1

75f336a7244aa3acf38201c4496d427fb750e8d7
SHA256

b2a0dc27945f178122b79c2afad14e4fe4a3232741703165e3a7ece31d4daebe
SHA512

271a98333e439cbacefd5ba994687d6616ff76ad27e2f0d156486733e79f4b20c41b04c1400e29a82fe9f09d60b94d570e71011a809cd46e391147b83773229b
SSDEEP

3072:QlAWWSspBqzrJUqnd/HY9JGQ11Or1qKAfdokTK/OF/kltwI7:vfbCrbnlaJDi1M5TdebwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd3fa6e12fe9133773313ba9f08cbab2_JaffaCakes118

Files

fd3fa6e12fe9133773313ba9f08cbab2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31b97461a493e83b51ad3946482b0441

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA
sndPlaySoundA

setupapi

InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GlobalAddAtomW
FileTimeToSystemTime
GetProcAddress
IsDBCSLeadByte
OutputDebugStringA
SetEvent
WaitForSingleObject
GetFullPathNameW
GetTickCount
GetFullPathNameA
lstrcpyA
ResetEvent
EnumResourceNamesA
GetTimeZoneInformation
Sleep
CreateThread
VerLanguageNameA
LoadLibraryA
EnterCriticalSection
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
GetTempPathA
LeaveCriticalSection
FreeLibrary

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ