4afe9701e57a5364b600f3e8250b2265_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4afe9701e57a5364b600f3e8250b2265_JaffaCakes118
Size

89KB
MD5

4afe9701e57a5364b600f3e8250b2265
SHA1

4c8fe489e2835edfb92d1ca4dcef8d8f74810193
SHA256

2fdcc4752e8e24efbb5bc78cebb100410043fcf9b367caba03c399abfec004c3
SHA512

a8f40f889db9a718871d573a543e91371bfb921b51aa6cb5c96a3ef6ae5069e9f0f123f0d8c81c6ca1f0aae277a254606018660a25c716008082e10cc23542fd
SSDEEP

1536:tnpklv+QsZ+R8tF2jCJO+yFyIprWiG0xxjfWDKQZip3c8JPMlfjd:bkd+tFtYbAyRxxjfWuQZyM/lLd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4afe9701e57a5364b600f3e8250b2265_JaffaCakes118

Files

4afe9701e57a5364b600f3e8250b2265_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a7400205866d6794f4f2a81b3f3da71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
OpenSemaphoreA
MultiByteToWideChar
CompareStringW
VirtualProtectEx
SleepEx
GetDateFormatA
lstrcat
GetLogicalDrives
MoveFileW
WaitForSingleObject
ExitProcess
GetVolumeInformationA
lstrlenW
GetStartupInfoW
GetCurrentDirectoryA

user32

EnableMenuItem
GetKeyState
DialogBoxParamW
RegisterClassA
SetCursorPos
GetSysColorBrush
GetMenuState
LoadImageA
MessageBoxA
MonitorFromRect
CreatePopupMenu

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ