06103d73090bc5da73080ee1fd2a42c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06103d73090bc5da73080ee1fd2a42c4_JaffaCakes118
Size

135KB
MD5

06103d73090bc5da73080ee1fd2a42c4
SHA1

f9d9f5e33f15b7d134beb9a39d63d57bac03322d
SHA256

9896a2a8257abcf1f154afe2ad8b01ed96af4858da72a32185cc56e8ad858ee0
SHA512

cfe345a3104c117ee824292f36ddfc2ad893aab47356a960ac524311ba74e1c43f5639a8456261066527f60719ecc74870add9ad7e7a4f25024eb1bcbaa7004c
SSDEEP

3072:75bsoKY1ivxdC6/9ZfZ7m4iqs62GcUwEgJ5nz4qx2jASFzMn7w:VAvxdx9tYNG8UwEgJlEZO7w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06103d73090bc5da73080ee1fd2a42c4_JaffaCakes118

Files

06103d73090bc5da73080ee1fd2a42c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19e6c1d49a6ea20707d517f5e2b335eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

kernel32

GetUserDefaultLCID
TlsFree
TlsAlloc
GetModuleFileNameA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
lstrlenW
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LoadLibraryExA
CompareStringW

ddraw

DirectDrawCreateEx
DirectDrawCreate

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ