21659fae175abb6281e04d6d5a45fff5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21659fae175abb6281e04d6d5a45fff5_JaffaCakes118
Size

148KB
MD5

21659fae175abb6281e04d6d5a45fff5
SHA1

cef084567f56a5eff72c214290d3db694c1cc404
SHA256

9261688681375708cf53fc887cfb605bf7f8e1b2f725cbd50677cf59723ff0f3
SHA512

a56f47cc76b894b558b1159ce2db9bf61a3bcb00ea17736d71d5b8b0355cdfb310d481c8b59b4e8f46b3f3780aa6333e6e74d2101fe22199cceb728441ec7cea
SSDEEP

3072:vPb3YTdXqTMGglU05gJ47NesIr+nxHHB+jS:HbIRaTMGg8JsNo6xHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21659fae175abb6281e04d6d5a45fff5_JaffaCakes118

Files

21659fae175abb6281e04d6d5a45fff5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d98b8675a84ef58585f3c26e5ef3fc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
VirtualFree
VirtualAlloc
GetProcAddress
GetModuleHandleA
AddAtomA
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ