5bee173ffa5466e251bca6d74cca6809_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bee173ffa5466e251bca6d74cca6809_JaffaCakes118
Size

311KB
MD5

5bee173ffa5466e251bca6d74cca6809
SHA1

5e977b62d190a3d446d38f4e2629b5331e935903
SHA256

faf50aa3fb476130bb2d3d522c615dcaea5e3a81603e9640582cbd41fc3b6f65
SHA512

c0ada9efe67c6d387579b52cf14a2c2620454164566e29989c446677ce1b30576e68f526a4c321efea81d6ba88eec113758c2ea19f1313a1f80fe551b96563ee
SSDEEP

6144:zIZzyXdKRQvchPlBpXQdiX2SwWxsHB0afMN8VmL7dG:cZzyNKaeRgo4B0akN8Vo7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bee173ffa5466e251bca6d74cca6809_JaffaCakes118

Files

5bee173ffa5466e251bca6d74cca6809_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71330cf44da69ccf3480b624459f02fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetModuleHandleA
GetLastError
SetLastError
FindResourceExA
VirtualProtect
GetVersionExW
FindAtomA
Sleep
FindClose
SetEvent
CreateMutexA
GetTickCount
CreateThread
ReleaseMutex
DeleteCriticalSection
lstrlenA
SearchPathA
OpenMutexA
CloseHandle

user32

CloseWindow
DialogBoxParamA
CreateMenu
GetMessageA
CreateWindowExA
IsIconic
GetKeyState
DispatchMessageA
EndDialog
DragDetect
FlashWindow
EqualRect
EnableWindow
CopyImage

loghours

DialinHoursDialogEx
LogonScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialogEx
DialinHoursDialog

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ