3d8e21a70ae600606a6ce7276955eec7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d8e21a70ae600606a6ce7276955eec7_JaffaCakes118
Size

629KB
MD5

3d8e21a70ae600606a6ce7276955eec7
SHA1

bb5016766b96f56db5a6c827562202441e798539
SHA256

3f88420c23f87c7be220446cefc8223d9b307d9187952c3516c6fa5a275c47b0
SHA512

a5b4adf3a6200f8cffc8a4ece3c846cc58d6b5d8754af671a49aa51c80c517dd299313337a0af5f891fb8c7da7bc3684888b47f209db080c0ca55a62a20b6a1a
SSDEEP

12288:QDutsCZgBzXgbkjbNDl0BJg0inywGH7plFpi8Z2gX0YAliRL:VtswgBNb52BJgfI7nFpg40YAli9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Abrechnung-1127518-21776049F7.com

Files

3d8e21a70ae600606a6ce7276955eec7_JaffaCakes118
.zip
Abrechnung-1127518-21776049F7.com
.exe windows:5 windows x86 arch:x86

6454e523b41ce4606c4d59e3eb617c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetPropA
LoadIconA
CharToOemW
LoadCursorW
MessageBoxA
PostMessageW
GetClassLongW
IsCharLowerW
PeekMessageA
GetDlgItemTextW
LoadBitmapA

kernel32

ReadFile
GetVersionExW
GetTickCount
LoadLibraryW
GetFileAttributesW
CreateProcessA
CloseHandle
LoadLibraryA
HeapAlloc
VirtualAlloc
OpenFileMappingW
FileTimeToSystemTime
CreateMailslotA
SleepEx
FindResourceExA
OpenSemaphoreW
SetCurrentDirectoryA
WriteConsoleW
CopyFileW

nddeapi

NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ