08f2b1633884c81f310c93b20022f078_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08f2b1633884c81f310c93b20022f078_JaffaCakes118
Size

370KB
MD5

08f2b1633884c81f310c93b20022f078
SHA1

fb121e165b5e09c77f07ed2b195d7dd0c55cf076
SHA256

972f7ccfa547585a1a9e714db74c42c54308f696b7b4999866c6f7b7507d531c
SHA512

cd757b676f94c7d9cfd20d9c99cc12801fc3c4c986d18eea595f3ae113c3b152e3ec3093583e996e3d7aa029e9a373d59b95ccc9d82003a1444f14093807d52e
SSDEEP

6144:hTA3s6GyC2Cy8fumy5UGR6go/pnGSBR0HfYHkImafR7pgXcHBf5NUpY/HzERKK:RA8z52CFumQUGQgoRGM0HfYAkRZd5mWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08f2b1633884c81f310c93b20022f078_JaffaCakes118

Files

08f2b1633884c81f310c93b20022f078_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f54919547e5bf56c00211997f89094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
GetModuleHandleW
InterlockedExchange
ResetEvent
FreeConsole
LocalFree
VirtualAlloc
GlobalFree
GetDriveTypeW
CreateThread
ReleaseMutex
lstrlenA
CreateFileW
GetExitCodeProcess
GetMailslotInfo
LocalSize
GetACP
ReadFile
FindVolumeClose
CloseHandle

user32

GetKeyboardType
DrawStateW
SetFocus
GetSysColor
EndDialog
GetCursorInfo
GetClassInfoA
DispatchMessageA
GetClientRect
CreateWindowExA
GetDlgItem
CallWindowProcW
IsIconic

dsprop

CheckADsError
ReportError
CheckADsError
CheckADsError
CheckADsError

desk.cpl

InstallScreenSaverW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ