4da151286238d918d106b5ab4bb798ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4da151286238d918d106b5ab4bb798ba_JaffaCakes118
Size

275KB
MD5

4da151286238d918d106b5ab4bb798ba
SHA1

2687599ee2d92b9f9dff02bce9649233aafbecad
SHA256

4090512d8b70a32d4485761dba63c2e05afc6929fb000bc4daeacb337a8f3a44
SHA512

844477bdb04a906245134b77e7f9d02b65c907c0f00544320eb608afcb2b2c6dbfbccdb19f2cd748ffbe11c16265b5c7c0a8a6eac65faafc5dd7ea7c5d2b9d73
SSDEEP

6144:twdlgusAVNFlU+9OGjxp7Cjv5PXP2RB2w7o9RWJLok4jq+BY:EvPFlz0Gjf7R77o9Rof+BY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4da151286238d918d106b5ab4bb798ba_JaffaCakes118

Files

4da151286238d918d106b5ab4bb798ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c8c50eb32d400f67ce94c939e9679a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
TlsSetValue
AddAtomA
TlsAlloc
IsBadWritePtr
VirtualAlloc
SetHandleCount
GetSystemInfo
SetLastError
GetCurrentProcess
InterlockedExchange
GetACP
EnumResourceNamesA
GetLocaleInfoA
GetFileType
GetVersionExA
GetModuleFileNameA
TlsFree
HeapSize
TlsGetValue
GetStdHandle
TerminateProcess
IsBadStringPtrW
GetStartupInfoA
GetEnvironmentStrings
SetEndOfFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
HeapCreate
UnhandledExceptionFilter

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

winmm

mciSendCommandA
sndPlaySoundA

shlwapi

PathAddBackslashA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ