442765fad8f404b4a26b2b7617d8eaf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

442765fad8f404b4a26b2b7617d8eaf1_JaffaCakes118
Size

53KB
MD5

442765fad8f404b4a26b2b7617d8eaf1
SHA1

f067f6ab43b32bb461ba2c0fcb682c4779bad198
SHA256

fc2ee0725fdf920cc6e84d60c63d6864ad32b66251f598e839c445f16ea4d18a
SHA512

c01e4ea01f7f6499e6e1808ebe9d7b06aabf4ce9de1e07736cd18b810953900ecd845b4bfc8510b3a321dff31153003a85c51994a2d5bd514c59be97480e70bd
SSDEEP

1536:nc0gLldmm9FMjBdsbaNZuBrFxYnnn34lF:c0Uz7P+sbjTYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442765fad8f404b4a26b2b7617d8eaf1_JaffaCakes118

Files

442765fad8f404b4a26b2b7617d8eaf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6db453e6d07a483916ab21d34fa332f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreateEx

shlwapi

wnsprintfA

kernel32

GetModuleFileNameW
GetExitCodeThread
LeaveCriticalSection
FindFirstChangeNotificationW
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA

oleaut32

CreateErrorInfo
DispInvoke
VarI1FromDec
VariantInit
SysFreeString

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 256B