65e2e1571436c390297705875b59054b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65e2e1571436c390297705875b59054b_JaffaCakes118
Size

310KB
MD5

65e2e1571436c390297705875b59054b
SHA1

4df8bb62acc9b75e90364a39788c88ee2d28029d
SHA256

c90b37b4e2734da3ded833d1154004d9eaf2785fd19007b8ced93674a852aaf8
SHA512

197e183a92afb7ae1be2afc969a07d52546b4a8a85939477ed65a6346d64e77b1b0bfaef1861193da3abe64a25b24e96de4ee07ff752eeaa9311efb6efd26da7
SSDEEP

6144:qVsUqNKeoUovB7pfa2kjAIh82O+opyHEfJEWS380lEzDaKzZ:MULQvpla2kEIhnMp4Ez5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e2e1571436c390297705875b59054b_JaffaCakes118

Files

65e2e1571436c390297705875b59054b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17ff793fb2dc72fb712dc0e80cb06a53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateProcessA
CreateThread
EnterCriticalSection
ExitThread
FreeLibrary
GetModuleHandleA
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MulDiv
OpenEventA
SetEvent
SetFilePointer
Sleep
TerminateProcess
WaitForSingleObject
WriteConsoleA
WriteFile
lstrlenA

user32

MessageBoxA
OffsetRect
PostThreadMessageW
SetActiveWindow
SubtractRect
UnregisterClassW
GetSysColor

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 295KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ