38a63c36a2422063533ab658a12b7fdc_JaffaCakes118 | Triage

Sharing

General

Target

38a63c36a2422063533ab658a12b7fdc_JaffaCakes118
Size

629KB
MD5

38a63c36a2422063533ab658a12b7fdc
SHA1

5c17786aaae463f18569428ee7e89d9e5ce3f573
SHA256

5070a4da7a123dea1e2e3a24d6c448a9ae93a8fe4e3f42023547e6263eed80ae
SHA512

256b0356ffd878ebf3d9a670a56d0fd3ea5d96c7be24aabe5d22be696affa9bc219315ac82c9ddedb2a0deab44120ee0c32a922dbe77e3fc60b00c45ee572c88
SSDEEP

12288:7DutsCZgBzXgbkjbNDl0BJg0inywGH7plFpi8Z2gX0YAliHh:utswgBNb52BJgfI7nFpg40YAliB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Verrechnung-978456-4482093J4.com

Files

38a63c36a2422063533ab658a12b7fdc_JaffaCakes118
.zip
Verrechnung-978456-4482093J4.com
.exe windows:5 windows x86 arch:x86

6454e523b41ce4606c4d59e3eb617c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetPropA
LoadIconA
CharToOemW
LoadCursorW
MessageBoxA
PostMessageW
GetClassLongW
IsCharLowerW
PeekMessageA
GetDlgItemTextW
LoadBitmapA

kernel32

ReadFile
GetVersionExW
GetTickCount
LoadLibraryW
GetFileAttributesW
CreateProcessA
CloseHandle
LoadLibraryA
HeapAlloc
VirtualAlloc
OpenFileMappingW
FileTimeToSystemTime
CreateMailslotA
SleepEx
FindResourceExA
OpenSemaphoreW
SetCurrentDirectoryA
WriteConsoleW
CopyFileW

nddeapi

NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ