4bf88f9a95b692aa2b5ca2d7b4c35edf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf88f9a95b692aa2b5ca2d7b4c35edf_JaffaCakes118
Size

655KB
MD5

4bf88f9a95b692aa2b5ca2d7b4c35edf
SHA1

c11cfaa6b19f7cf24a549697c43d510718cc3248
SHA256

15d138194058baa574f27f46406bf97733a6c6045987eed28ca670243ccfce62
SHA512

b859813d124d32bac65a01c9674bcb4541c744230749f9526e059a371f47f3a3da6ca3a1460b4cdeb50ccbadd8a58484e1eddd997252f9a997640de7afc10a24
SSDEEP

12288:VqDkjwcpbNB89YmRt4e5F9tVI6W6JLS3mw97+rq1Kfp:Llb9e5Pw6W6JLS2w5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf88f9a95b692aa2b5ca2d7b4c35edf_JaffaCakes118

Files

4bf88f9a95b692aa2b5ca2d7b4c35edf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dab4252e8e394787570ae1bcd8938c61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetPropA
LoadIconA
CharToOemW
LoadCursorW
MessageBoxA
PostMessageW
GetClassLongW
IsCharUpperA
PeekMessageA
GetDlgItemTextW
LoadBitmapA

kernel32

ReadFile
GetVersionExA
GetTickCount
LoadLibraryExW
GetFileAttributesW
CreateProcessA
CloseHandle
LoadLibraryA
HeapAlloc
VirtualAlloc
OpenFileMappingW
FileTimeToSystemTime
CreateMailslotA
GetACP
FindResourceExA
OpenSemaphoreW
SetCurrentDirectoryW
WriteConsoleW
CopyFileW

nddeapi

NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ