e7b7982c3aab284e7deff07f08af86d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7b7982c3aab284e7deff07f08af86d2_JaffaCakes118
Size

89KB
MD5

e7b7982c3aab284e7deff07f08af86d2
SHA1

e90cd412d1b2405564c0fbb766cde22989e8c824
SHA256

3f63d6965a324a38a8e040263f7a1e2167ec035dfa1624169d191947c9a0366c
SHA512

6c5c84b96f27f5179ab9216938681dab8aa9acb22956cff623e21d1ac0ff6c642725d0e2ff3ab0f012d17a318988c52cf6d399e70f7004619fb1ade000119d54
SSDEEP

1536:7AVj2DWyJazTCuiwrDtdaRKdT7OSqrnF/E0m:7IJzTCuHvawt7OSu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7b7982c3aab284e7deff07f08af86d2_JaffaCakes118

Files

e7b7982c3aab284e7deff07f08af86d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0d2b125e9f4ebdcf3105f26978384d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindResourceExA
ExitProcess
CreateThread
SetEvent
GetTickCount
GetCalendarInfoA
DeleteCriticalSection
TlsGetValue
GetDiskFreeSpaceA
VirtualProtect
GetModuleHandleA
ReleaseMutex
GetLastError
FindAtomA
FindVolumeClose
CloseHandle
lstrlenA
Sleep
SearchPathA

user32

EndDialog
CloseWindow
GetMessageA
DragDetect
DispatchMessageA
CopyImage
CreateMenu
IsIconic
GetKeyState
DialogBoxParamA
GetUpdateRect
CreateWindowExA
GetScrollBarInfo
EnableWindow

msdmo

DMOGetName
DMOEnum
DMORegister
DMOGetTypes
DMOUnregister

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE