046dba0f89ab03b49a8838ecfe73b922_JaffaCakes118 | Triage

Sharing

General

Target

046dba0f89ab03b49a8838ecfe73b922_JaffaCakes118
Size

332KB
MD5

046dba0f89ab03b49a8838ecfe73b922
SHA1

b9e6b6cbecf3415fa25634af7afdaebe974556a2
SHA256

475ae4b89d93c06a34d8933ef8a929c84c2f1fc418b780485cbbaecd01e7a419
SHA512

e1545cefa74cca74915d0f236122045485d03533970194a90ceea2a6263c21a3588cb398236b7934ef89d72a49cd32f36970531812408266e3158478c72dc3b0
SSDEEP

6144:xHlGnIHaORXupgXkA7xJA1TgEZsNNHyvdPwBplBpMjM:/GoX3XbT59NNSNCrMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046dba0f89ab03b49a8838ecfe73b922_JaffaCakes118

Files

046dba0f89ab03b49a8838ecfe73b922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0a7f231ec166d68f4c203a07dded417

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
GetLastError
ExitProcess
Sleep
GetCommandLineA
GetTempPathA
GetEnvironmentStrings
VirtualLock
GetProcAddress
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
WriteFile
GetSystemInfo
CreateFileA
VirtualAlloc
GetModuleHandleA
CloseHandle
CreateSemaphoreA

user32

InSendMessage
wsprintfA
GetTopWindow
IsZoomed

advapi32

CryptAcquireContextA

ole32

CoUninitialize

psapi

GetModuleInformation

msvfw32

ICClose
DrawDibTime

crypt32

CertOpenSystemStoreA

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ