599af52aa4694ddab73f4e8d3590c64a_JaffaCakes118 | Triage

Sharing

General

Target

599af52aa4694ddab73f4e8d3590c64a_JaffaCakes118
Size

171KB
MD5

599af52aa4694ddab73f4e8d3590c64a
SHA1

0030f9aec94e1e053c9c4d5039bcb525f8217ef4
SHA256

45224c151a7e01dc22416c101f59a4d676ee4a6159ed77204c9681bb67ed2b0c
SHA512

c4705c15a1b96dfeee97d01435e31ec9f2a6b4c1b70bcc8fad7f6f6630bf5bc737582d79dcea8f4f500dacf87c9275b22fd057d42572cfd7d70dd75f07446681
SSDEEP

3072:rpXM8EtbjoygS5dYt2VXmVCYZ3p0B175WVKA+sF18Gtx4L1p1YCluQsoyerfn/hC:ri7tbMy5dYt+X+Z3I75WQAb336L1qQFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
599af52aa4694ddab73f4e8d3590c64a_JaffaCakes118

Files

599af52aa4694ddab73f4e8d3590c64a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

599b9f8f123e1e6e2d98cd354e6efcf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ValidateRgn
ReleaseCapture
InvalidateRgn
ExcludeUpdateRgn
SetCapture
ValidateRect
RealGetWindowClassA
GetCapture
GetUpdateRgn

kernel32

SystemTimeToFileTime
GetShortPathNameW
ConvertFiberToThread
FindNextFileW
SetThreadPriority
SetErrorMode
FindClose
FileTimeToSystemTime
SetEnvironmentVariableW
CompareStringA
GetLocalTime
LoadResource
GetStringTypeW
EnumResourceNamesW
FreeLibrary
RegisterWaitForSingleObject
SetCurrentDirectoryW
FileTimeToLocalFileTime
FindFirstFileW
LocalFileTimeToFileTime
FindResourceW
SearchPathW

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 512B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ