20fa9b4a56e61184e7f0ebef25b5fb19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20fa9b4a56e61184e7f0ebef25b5fb19_JaffaCakes118
Size

290KB
MD5

20fa9b4a56e61184e7f0ebef25b5fb19
SHA1

35a004106bd679de11c7373a1770b6863697a9b9
SHA256

3307c42f1fb9737ed1996aa247cf03e168dc1e368a48bc6f5b023e780835c4da
SHA512

2a4949df61a3a6139fd8d5d08b844c60ff66dd32f739edd9757723fbe37c0f1b1857a3b396e648be97332366ca7554cae0ff9b7f3e210b7c69477993bbe23828
SSDEEP

6144:l6fzCjrnX5oReLO9LPAM1jd+jPOijSGZI2GqyWzk6PA9J62d:+C/WZZKRjSGZrqt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20fa9b4a56e61184e7f0ebef25b5fb19_JaffaCakes118

Files

20fa9b4a56e61184e7f0ebef25b5fb19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5167434cd35cc221c82425edf6666dea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringA
CreateEventA
CreateIoCompletionPort
CreateProcessA
CreateThread
EnterCriticalSection
ExitThread
GetThreadPriority
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalReAlloc
MapViewOfFile
ReadFile
SetEvent
Sleep
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

DeleteMenu
GetDlgItem
GetMenuItemCount
InflateRect
KillTimer
MessageBoxA
RemovePropW
SetCapture
UnregisterHotKey

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ