614d4fb027324ce7fe97f34cd62cb673_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

614d4fb027324ce7fe97f34cd62cb673_JaffaCakes118
Size

312KB
MD5

614d4fb027324ce7fe97f34cd62cb673
SHA1

d35d0470d79f28ed3d7d16d12e191b24a124cace
SHA256

413e65d6a3f8f9a6d0ddb60f065ece7ea79186108f3117e9c45b9d48df168788
SHA512

8f1cade0c18113d5ab412c446b2c881bba264c83ef54f74d9c8fd7f25f95ecfa6808aa4910328cc03b64c9df003679c3683750378a14b1efb72f232b8a8dba84
SSDEEP

6144:yeUX6bOzXjha8bkE9ykKL7y/6O+OfwqSU/tG+Y5o0br6SNtZYfsV:yn6bOzXj3l9y7KSNqf/RY5o0brxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
614d4fb027324ce7fe97f34cd62cb673_JaffaCakes118

Files

614d4fb027324ce7fe97f34cd62cb673_JaffaCakes118
.exe windows:4 windows x86 arch:x86

623a7f932ebb2742bfc852452f09833c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
VirtualAlloc
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
CreateFileA
SetEvent
GetProcAddress
GetSystemDirectoryA
Sleep
HeapFree
HeapAlloc
HeapReAlloc
GetFileType
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind

user32

DestroyWindow
FindWindowA

ole32

CoUninitialize

netapi32

NetDfsRemoveStdRoot

avifil32

AVISaveOptionsFree

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ