1690b5c71df857ea5aca1f66adeba192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1690b5c71df857ea5aca1f66adeba192_JaffaCakes118
Size

146KB
MD5

1690b5c71df857ea5aca1f66adeba192
SHA1

71af88bd29b90c40a17892d20282c812818380cc
SHA256

816d6ffc797d6e7d5b761e26ddfefd235b2bddb16609ae366829b58ef6d05485
SHA512

2162fd61400c401be3ee901dea4b1fe1a50d99c993250f008ae427f14d74e0ca256d072806967a8d85d9d846b803cde9ba2705b0f1da757937cde56ee668878a
SSDEEP

3072:3kqipZf0qHwV38Hd8RdlMvNRD/n1LuSrSp4:3kVsqHwZa8RcjASmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1690b5c71df857ea5aca1f66adeba192_JaffaCakes118

Files

1690b5c71df857ea5aca1f66adeba192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f37060c9888464943fda6d0265e2c2cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageA
SetTimer
CharNextA
PostThreadMessageA
KillTimer
GetMessageA
CharUpperA
LoadStringA

rpcrt4

NdrClientCall
RpcStringBindingComposeA
RpcBindingSetAuthInfoA
RpcBindingFromStringBindingA
RpcStringFreeA

kernel32

ClearCommError
CreateMutexA
CreateProcessW
GetExitCodeProcess
ClearCommError
ExitProcess
QueryPerformanceCounter
EnumResourceNamesW
ReleaseMutex
ExitProcess
GetStartupInfoA
CreateFileMappingA
MapViewOfFile

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ