61555a570ea5ecab436c25306390c005_JaffaCakes118 | Triage

Sharing

General

Target

61555a570ea5ecab436c25306390c005_JaffaCakes118
Size

319KB
MD5

61555a570ea5ecab436c25306390c005
SHA1

b978774ab1717333127a4005db42d293e8e10923
SHA256

4fbc6f38b7ed0832093d0977f5c7473420d08ce6d1068f260782ff18e9c5f5ce
SHA512

c0463c3bd7971fa5bc165de17ed1ff64dff6ed7bb0e1cd8a7e2893429d195f8db24f08137434df08ba9f882f15c42712c918dba188d113896a7d2bbfdc36eb63
SSDEEP

6144:ULo95DyHO8JgOB7GAGhP9WH5yg+Sz+tWwnh6JMCEy5lpGds:Uk9b81c+5BTzb4Hy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61555a570ea5ecab436c25306390c005_JaffaCakes118

Files

61555a570ea5ecab436c25306390c005_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c62e75d28f9a487c0a139bcb4ca19ecb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileMappingA
CreateThread
EnterCriticalSection
GetCurrentProcessId
GetEnvironmentVariableA
GetPrivateProfileStringA
GetThreadPriority
GlobalAlloc
InterlockedExchange
LoadLibraryA
LoadLibraryW
ReadFile
SetErrorMode
SetLastError
Sleep
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
lstrcpynA
lstrlenA

user32

EnableMenuItem
FindWindowA
GetSystemMenu
GetWindowLongW
GetWindowThreadProcessId
LoadAcceleratorsW
LoadStringW
SetRect
TrackPopupMenuEx
UnionRect
WaitMessage

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ