4e068ee065ca78289bcd03ccd09bc7f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e068ee065ca78289bcd03ccd09bc7f7_JaffaCakes118
Size

309KB
MD5

4e068ee065ca78289bcd03ccd09bc7f7
SHA1

77379d7942e1295ad9068d10441d5e0ae671889c
SHA256

42bfa76ca4325ce3ae9080883f318e7e6e6f45b93c8dccbe203b9566d565d6bf
SHA512

82f8f7fe4cae3f477f087b2ae874134a5fb4e8ebdf1f723c3d026668a2e7fc910cba9b1e9584f60d88aedce897469de59d15a74a437fc8c32dfd821450bdc8a6
SSDEEP

6144:s1LByuy0GxWTkf7pYSdn6PCloEvSVQSlly+dkbsp7TLqReo0iXkPpC:wIPJWYfdYSdnbyQShkE/oHUh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e068ee065ca78289bcd03ccd09bc7f7_JaffaCakes118

Files

4e068ee065ca78289bcd03ccd09bc7f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2d4023d0e79d4309739cf346ba9b129

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
CloseHandle
VirtualFree
GetModuleHandleA
CreateFileA
Sleep
HeapFree
GetProcAddress
LocalLock
VirtualAlloc
GetFileSize
VirtualQuery

user32

CloseWindow
PostMessageA
GetSysColorBrush

gdi32

CreateSolidBrush

netapi32

NetDfsRemoveFtRootForced

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE