JaffaCakes118_289c05bfe6833f103e96cc733057fd34 | Triage

Sharing

General

Target

JaffaCakes118_289c05bfe6833f103e96cc733057fd34
Size

187KB
MD5

289c05bfe6833f103e96cc733057fd34
SHA1

eda3d3c71cabfc946f5335e3cd48d9fb7ff5ff8e
SHA256

4e6119e5932aac7d72e61bde7a4f2dd3f0b2ad1cb3a4f7de34a7adaa83f63787
SHA512

d36ee68e53ff89c6ce2bdfba54cf962d7f47d872fe618036904ba38c615b2b81ae3c8a8e7ad59811584331a1cbf2fb82c40b2dab4941dc777e2da37afbe01b83
SSDEEP

3072:l2vjHdaoHP8+5uzYbHmpBnAE4rVktA8RPfBETe:SjRk4uz02BnA2NR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_289c05bfe6833f103e96cc733057fd34

Files

JaffaCakes118_289c05bfe6833f103e96cc733057fd34
.exe windows:4 windows x86 arch:x86

898d81f21070b191cb39f8a56b1e72b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
LeaveCriticalSection
GlobalAddAtomW
LoadLibraryA
FileTimeToSystemTime
LoadLibraryW
ResetEvent
SetEvent
OutputDebugStringA
GetTickCount
lstrcpyA
GetFullPathNameA
DeleteCriticalSection
EnumResourceNamesA
VerLanguageNameA
IsDBCSLeadByte
GetFullPathNameW
InitializeCriticalSection
WaitForSingleObject
EnterCriticalSection
CreateThread
Sleep
GetTempPathA
GetProcAddress
FreeLibrary

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

winmm

mciSendCommandA
sndPlaySoundA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ