65b582a83383f7718c253da9d48375fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65b582a83383f7718c253da9d48375fd_JaffaCakes118
Size

168KB
MD5

65b582a83383f7718c253da9d48375fd
SHA1

9e9a691383943b821d9b201eff0b0651ccc95a00
SHA256

fd97bd0a8ff10639b79573e7e30c511c90c5ce361d0e415d887c842f877b514f
SHA512

524fe85e196e0dcf552d04b90821ce34140c82f1b600250a73ef35ac1fffb0367a79edf2d17e4dde35ae3fe657261ce4d504699e2a026322f8bb24ba28d21325
SSDEEP

3072:YF7mT8dFxcwd28B8V38kgBUgZnSKOjy5wddT30ZjEB:WaT8d3cs28BXkgWKOjxBkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65b582a83383f7718c253da9d48375fd_JaffaCakes118

Files

65b582a83383f7718c253da9d48375fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b4af10917c1d15c921e4e9c7a29a96b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
AddAtomA
VirtualAlloc
GetProcAddress
VirtualFree
GetModuleHandleA
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ