ed85bf27cbcbbf4ab8467c40af725102_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed85bf27cbcbbf4ab8467c40af725102_JaffaCakes118
Size

157KB
MD5

ed85bf27cbcbbf4ab8467c40af725102
SHA1

7f923141fac1e0aa00eb728850214fd90af5e8e6
SHA256

aa048326b85dee13198f887f0163ace6bd8214c03303f529a600fca8645739d8
SHA512

f882654b44bbda0e90bfa4e2f4879becf0fc83dbca33f08fe8a4e0857458f5e92db3b5697a55afbc015c7bc525aa9665635d3dfed9fbb7b010a6c53da545d038
SSDEEP

3072:7P1MIudGvRIim9yPfLIJrk7uTqXsTZ52U8iWZKa/05GhxYpA:7P1MIug8A2kJ83zWZKM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed85bf27cbcbbf4ab8467c40af725102_JaffaCakes118

Files

ed85bf27cbcbbf4ab8467c40af725102_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3534b02228829e7bd6bd57bb60723a51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
DragQueryFileA
SHFileOperationA
SHGetDesktopFolder

kernel32

SetLastError
GetFileType
GetLocalTime
MoveFileExA
GlobalFindAtomA
lstrlenA
InitializeCriticalSection
LocalAlloc
GetModuleFileNameA
GetVersionExA
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualQuery
Sleep
CreateEventA
ExitProcess
SetThreadLocale
SetHandleCount
GetSystemDefaultLangID
GetEnvironmentStrings
HeapAlloc
SizeofResource
VirtualAllocEx

user32

GetCursor
GetFocus

version

GetFileVersionInfoA

gdi32

SetBkMode
RestoreDC
SaveDC
GetObjectA
CreateDIBSection
SetBkColor
GetDIBits
GetCurrentPositionEx
CreatePalette

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE