320d2a437b623e27ffa57c7d8a4ca397_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

320d2a437b623e27ffa57c7d8a4ca397_JaffaCakes118
Size

145KB
MD5

320d2a437b623e27ffa57c7d8a4ca397
SHA1

f26469ddd94fd1cdc4735b60278b037d2f4c033b
SHA256

74c07eebda03f737b77d6ccdc134bc577b30aefa2d56669fdffb2e87a6681955
SHA512

41632a20c2d3627658d5e74111ed2bbc28494c0ac6433ddb6916aa248bfed0a6c50e33d0371c15f015dedc1c2247a46833610bba52cfd09ca2a1da51a8ae41c6
SSDEEP

3072:01jJPt1vAUU+aWAJp5YBsVKVT9vE74BZ016VTGr+Rije8l:gJPIL+aPiWKLskuAVTGSRije

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
320d2a437b623e27ffa57c7d8a4ca397_JaffaCakes118

Files

320d2a437b623e27ffa57c7d8a4ca397_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b678077485bdfeef03bfc781747ed74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
PostThreadMessageA
KillTimer
CharNextA
GetMessageA
CharUpperA
PeekMessageA
LoadStringA

rpcrt4

RpcBindingSetAuthInfoA
NdrClientCall
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA

kernel32

ClearCommBreak
QueryPerformanceCounter
CreateProcessW
ClearCommBreak
ReleaseMutex
GetStartupInfoA
EnumResourceNamesW
CreateFileMappingA
CreateMutexA
ExitProcess
ExitProcess
GetExitCodeProcess
MapViewOfFile

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ