4466e245efef7dde87614099e92415cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4466e245efef7dde87614099e92415cb_JaffaCakes118
Size

305KB
MD5

4466e245efef7dde87614099e92415cb
SHA1

8f3055f07460301325b4e96de3bc7a3a368ecd7f
SHA256

d9aa85d80bd31527eb75299de45acc2a2fa72e0437d6730ed2eaf3662a1501f2
SHA512

1735a4387a35962836417cfd2c51dd5c4a53ee88c9ca78f71427332469c7e5b03e9a6558ec481e4cdf25daf06a980377a9c1e17d855025d322861731924d0ee1
SSDEEP

6144:Wj3CDo0RsQGBy6SIqdrKuPcvmqKGS+X+lYeumwCq9odNwnh:Wj3CDn1ilSZ9cOSfwwCLrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4466e245efef7dde87614099e92415cb_JaffaCakes118

Files

4466e245efef7dde87614099e92415cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ef24bf7928917a3982b44e9073d199c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
ReleaseMutex
GetCurrentThreadId
HeapCreate
IsBadStringPtrW
InitializeCriticalSection
GetCurrentProcessId
LoadLibraryW
GetPrivateProfileStringA
GetFileTime
GetDriveTypeA
CloseHandle
FindClose
LocalFree
TlsGetValue
CreateEventW
WriteFile
lstrlenW
GlobalFlags
ReleaseMutex

user32

GetSysColor
GetClientRect
CallWindowProcW
DrawTextA
GetKeyboardType
DispatchMessageA
CreateWindowExA
GetClassInfoA
DrawStateW
GetSysColor
IsWindow
EndDialog
SetFocus

qcliprov

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ