622b83ad6e01fa27d8906c4d30d28289_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622b83ad6e01fa27d8906c4d30d28289_JaffaCakes118
Size

305KB
MD5

622b83ad6e01fa27d8906c4d30d28289
SHA1

fa8d34458098f7bba9752dd9f07747cb9008e818
SHA256

2657d0a73c559dbd8fd9e7bab11c7acea59980fae22a7a00a60c6bf74b5ac978
SHA512

1e5a334a6f54c01360e44ae5fa4cd5e5dcdd2f7f521a272c725731c491f38203e17547fc3464456f0b150392782928feb6722652d9fd008a52983f7be7b9e9fe
SSDEEP

6144:shKJpTNFPobuB/Wlt/lI/34C6T8lOP0FU2BTCOWa/A:1NFP7Wlt9IwYlG0FZBTSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622b83ad6e01fa27d8906c4d30d28289_JaffaCakes118

Files

622b83ad6e01fa27d8906c4d30d28289_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fe0ebb59154bf4106823ebd7d963374

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetFileTime
FindClose
LoadLibraryW
lstrlenW
GetCurrentThreadId
WriteFile
LocalFree
InitializeCriticalSection
GetPrivateProfileStringA
GlobalFlags
ReleaseMutex
GetCurrentProcessId
HeapCreate
GetEnvironmentVariableW
IsBadStringPtrW
CreateEventW
FindAtomA
TlsGetValue
GetDriveTypeA

user32

CallWindowProcW
GetSysColor
EndDialog
DrawStateW
GetClassInfoA
CreateWindowExA
IsWindow
GetKeyboardType
DispatchMessageA
GetSysColor
SetFocus
GetClientRect
DrawTextA

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ