f57fa571fa8fff371aed69b8b91e98e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f57fa571fa8fff371aed69b8b91e98e8_JaffaCakes118
Size

789KB
MD5

f57fa571fa8fff371aed69b8b91e98e8
SHA1

b2b57b5f40fe11511361490a7b3134e68135faac
SHA256

1a4ab33f124c2d05c63cd9bc70babd11716ccae95c1feb0ec195eb27ef79db82
SHA512

1c229b7a0973688f010969cfa9e7d3c0440b18a82a39779d95a41886a2ccbccbd5225d036ccecd6209a3b3390bf4758d1f1821ef6325b73b0ca6f95d4926d741
SSDEEP

12288:iXTfk4PfdpWm8526+liaOoAhMSrjVWp1pnC5ih+dBbvbB:hmd4mlihooMSrjVo1pIiYBbv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57fa571fa8fff371aed69b8b91e98e8_JaffaCakes118

Files

f57fa571fa8fff371aed69b8b91e98e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7de8b9a5cabd61edd3dfac6f7291f528

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GlobalUnlock
CreateFileA
HeapCreate
SetLastError
lstrlenW
GetPriorityClass
CloseHandle
SetEnvironmentVariableA
LocalFree
VirtualQuery
ReleaseMutex
CreateMutexA
TlsGetValue
GetCurrentThreadId
LoadLibraryExW
GetModuleHandleA
TerminateThread
DeleteAtom
FindResourceA

user32

CopyRect
GetCaretPos
IsWindow
DispatchMessageA
DrawMenuBar
GetIconInfo
CheckRadioButton
DrawEdge
CallWindowProcA
GetDlgItem
FillRect
GetDC
SetFocus

ntshrui

SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
IsPathSharedA
IsPathSharedW
GetNetResourceFromLocalPathA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 766KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ