6313330b5e4ebaed019093fc925c64bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6313330b5e4ebaed019093fc925c64bb_JaffaCakes118
Size

94KB
MD5

6313330b5e4ebaed019093fc925c64bb
SHA1

7255e3b33c241dd4f30d7a693beec334e2ca60a9
SHA256

70543f0dfd9d7a30e964d372eb9c214a13b00498b9698d8d676a826329b416f6
SHA512

8118914a26e64d5d6967403974e03aa52e41e8ada7d0991945c48b3cbdb3f3e8a76f7c8478624907ea4020236d4fdfc0c57844d15e59aaec3b5289257d0f8258
SSDEEP

1536:xBs0QKcZ0WwjUnLxWiisz0NjFDpgYf0yc7on9juwmCyAQpKSJWUl:xBVgj3LYsihDm+V8K9jfmCypKsWUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6313330b5e4ebaed019093fc925c64bb_JaffaCakes118

Files

6313330b5e4ebaed019093fc925c64bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b92d6d6a769fba2d8a998369214f6b85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
DestroyWindow
DestroyIcon
DestroyCursor
CreateIcon
CreateDialogIndirectParamA
CreateDesktopA
CopyRect
CopyImage
CharUpperBuffA
CharUpperA
CharToOemA
CharPrevA
ActivateKeyboardLayout

kernel32

GetDateFormatA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
VirtualFree
TlsAlloc
SleepEx
Sleep
SetCurrentDirectoryA
ReadFile
RaiseException
LocalAlloc
GetVersionExA
GetVersion
EnterCriticalSection
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
GetFileSize
GetLastError
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE