66b18712776298dcf25eb7d928b5475c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66b18712776298dcf25eb7d928b5475c_JaffaCakes118
Size

372KB
MD5

66b18712776298dcf25eb7d928b5475c
SHA1

aff8d611caa5fbb59a40f34f95bfc9fa006bce36
SHA256

76c37ee65b7a4cfc8520579e7ee6829fc8f242a43d5e1eb2f0535f56d2203181
SHA512

7fa44f6117d54576bae3a21b3847f946ae9c9e2ce50ce801043bdff1a9111614394d0db88d5b52d4e218e05edd604781c66ce31a41e6013814d727f3a502da8c
SSDEEP

6144:Kr9jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:KrNvjVkCrSvoZNyl5fwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66b18712776298dcf25eb7d928b5475c_JaffaCakes118

Files

66b18712776298dcf25eb7d928b5475c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7300314768e9d66e69570801e3c19ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
GetDriveTypeA
LocalFree
GlobalFree
VirtualAlloc
CreateFileW
GetComputerNameW
GetLocalTime
GetModuleHandleW
FreeConsole
SetEvent
GlobalSize
lstrlenA
FindVolumeClose
GetTickCount
ExitThread
GetPrivateProfileIntW
CloseHandle
ReleaseMutex
ReadFile

user32

DrawStateW
GetCursorInfo
GetClientRect
CallWindowProcA
GetSysColor
GetDlgItem
EndDialog
GetClassInfoA
CreateWindowExA
GetKeyState
GetMenu
SetFocus
DispatchMessageA

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

ntshrui

IsPathSharedA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ