29df53804165d55afafff497ad468d09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29df53804165d55afafff497ad468d09_JaffaCakes118
Size

152KB
MD5

29df53804165d55afafff497ad468d09
SHA1

90a5aa9395d021660ddf54257fd17bb7b4186d5d
SHA256

9bf51971ed5f237f789f5158cda65095db6977d2f9229ce6badecf0412e2ee35
SHA512

b67b13052a6958a4865f5035470726361dc64ab67cd6f07f07a8328b9c8f06c42f13497c96f90487041e6dd9ddb09b4ac1a9b6221b2fa1f10aa77f1ce6252926
SSDEEP

3072:xLinC6f5+8UwJlH9VJjf8QX8zKP6D9wXk3/ISQRcaAl1yLD:xLi3RPph8QXF8wUvISQRca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29df53804165d55afafff497ad468d09_JaffaCakes118

Files

29df53804165d55afafff497ad468d09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d98b8675a84ef58585f3c26e5ef3fc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
VirtualFree
VirtualAlloc
GetProcAddress
GetModuleHandleA
AddAtomA
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ