f69bcfbaeb69fef8146ca4ee9d0c8a94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f69bcfbaeb69fef8146ca4ee9d0c8a94_JaffaCakes118
Size

750KB
MD5

f69bcfbaeb69fef8146ca4ee9d0c8a94
SHA1

83470c671d6ebe795640576ed6870bfb09205b7a
SHA256

29daf5bd0415bdb05c88456a96ed5661a6c6217a07bb65919f23c9afb96fb997
SHA512

429adbe32ec929f292df6234bd821705c30c709d5f3b448d3eb9ef2f28c70f4904a85e6d9db70b2a769a3e10c99bff9e05401fa031e617ad8665cbe91b99cc2d
SSDEEP

12288:AMFihSn/UaZtuouWZBHoAn7veIcbs5Nmvgm7QLPSF9Ajf8F3TH:vF4Zi0ouW3o87vfc6NcsuF9jH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f69bcfbaeb69fef8146ca4ee9d0c8a94_JaffaCakes118

Files

f69bcfbaeb69fef8146ca4ee9d0c8a94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

340074ea08867ac039e87b375482c65d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
SuspendThread
GetTickCount
ExitProcess
GetModuleHandleA
GetCommandLineW
DeleteFileA
OpenEventW
FindVolumeClose
HeapCreate
WriteConsoleA
ReleaseMutex
CloseHandle
CloseHandle
SetEvent
FindResourceExW
OpenThread
GetEnvironmentVariableW
GetStartupInfoA
GetFileAttributesA

user32

FindWindowA
GetSysColor
DispatchMessageA
GetKeyState
GetCaretPos
GetClassInfoA
IsZoomed
PeekMessageA
GetIconInfo
CallWindowProcW
DispatchMessageA
GetWindowLongA
SetFocus

htui

HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ