0008752a5e6a8317313ed518d3dd2af7_JaffaCakes118 | Triage

Sharing

General

Target

0008752a5e6a8317313ed518d3dd2af7_JaffaCakes118
Size

53KB
MD5

0008752a5e6a8317313ed518d3dd2af7
SHA1

e6ad976e99d76a9f49d7b59602651ae7941bc27b
SHA256

e666cffed1b3646301e4f3766b8b3e916c5bab0bf9a56a6ae24e43644a99daf0
SHA512

318c1907df2cebabd5628dda9d7627a67807235d76b348bf67274539b99c748b4f7c44dde2af104eb34ec92a02af3cfffd53192976a755cf572716032ead3fc7
SSDEEP

1536:ieA1vUW1imE3iIFaD9HBFjmkTYrwj4/7IMAsP:/kV8aAMYr44TIMAsP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0008752a5e6a8317313ed518d3dd2af7_JaffaCakes118

Files

0008752a5e6a8317313ed518d3dd2af7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b41f36742e1e66a4bc9256e9e3f52e17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreateEx

shlwapi

wnsprintfA

kernel32

GetModuleHandleExA
GetExitCodeThread
LeaveCriticalSection
FindFirstChangeNotificationW
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA

oleaut32

CreateErrorInfo
DispInvoke
VarI2FromDec
VariantInit
SysFreeString

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 270B