42803149338a8079886782ace512c34f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42803149338a8079886782ace512c34f_JaffaCakes118
Size

370KB
MD5

42803149338a8079886782ace512c34f
SHA1

0b805273555192a463eeba412f4d2458076040ce
SHA256

9366cca50760b195b22039088b5344ffa23adc76e7019d4a2332d4c6a021017e
SHA512

6c63fbab197148be3d8b16d64b1a26f0f7b11d064328b37e5e51ab8e6f8dcf2b8225cdd024e397da4f895b6626736ba7c1dcdab292d905fed7d975bcbdb54478
SSDEEP

6144:xvTA3s6GyC2Cy8fumy5UGR6go/pnGSBR0HfYHkImafR7pgXcHBf5NUpY/HzERKK:x7A8z52CFumQUGQgoRGM0HfYAkRZd5mH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42803149338a8079886782ace512c34f_JaffaCakes118

Files

42803149338a8079886782ace512c34f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f54919547e5bf56c00211997f89094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
GetModuleHandleW
InterlockedExchange
ResetEvent
FreeConsole
LocalFree
VirtualAlloc
GlobalFree
GetDriveTypeW
CreateThread
ReleaseMutex
lstrlenA
CreateFileW
GetExitCodeProcess
GetMailslotInfo
LocalSize
GetACP
ReadFile
FindVolumeClose
CloseHandle

user32

GetKeyboardType
DrawStateW
SetFocus
GetSysColor
EndDialog
GetCursorInfo
GetClassInfoA
DispatchMessageA
GetClientRect
CreateWindowExA
GetDlgItem
CallWindowProcW
IsIconic

dsprop

CheckADsError
ReportError
CheckADsError
CheckADsError
CheckADsError

desk.cpl

InstallScreenSaverW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ