159051d0cb9bd75a399125fcae16d303_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159051d0cb9bd75a399125fcae16d303_JaffaCakes118
Size

50KB
MD5

159051d0cb9bd75a399125fcae16d303
SHA1

4d50d709eeec7384c474a337b47523524d908e7f
SHA256

4c577e58ba2ac871581eb64308641a0f5f1c456db01489ee4a384425323702f7
SHA512

53ea4d6a5ee79bb121a1b01f90285ab738357bdce2b4dedac7a3590a7704951e60de730063715d2161465944cc1538ab4a087f112d4742317062677889a16035
SSDEEP

1536:3FAjQqg4HVPljPhWVO2DCEehnFqMXVO+986Hb:3FsH9LhIp7sqMXVO+Z7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159051d0cb9bd75a399125fcae16d303_JaffaCakes118

Files

159051d0cb9bd75a399125fcae16d303_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd850d83b21b67ed2a2fa0f23e16f305

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
SetConsoleCP
InitializeCriticalSection
GetCommandLineA
SetStdHandle
Sleep
GetProcAddress
GetStartupInfoA
DeleteFileA
CreateFileW
LoadLibraryA
GlobalUnlock
GetOEMCP
HeapAlloc
GetModuleHandleA
ExitProcess
GetVersion
GetVersionExA
VirtualProtect
GetDateFormatA
GetFileType
GetCurrentThread
SetEndOfFile
ReadFile
GetEnvironmentStringsW
SetUnhandledExceptionFilter
WaitForSingleObject
WriteFile
GetACP

user32

CopyRect
SetFocus
SendMessageA

advapi32

RegQueryInfoKeyA

gdi32

CreatePatternBrush

msvcrt

_wtoi

ole32

CoUninitialize

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ