6716c48e1b15090692ba2eabdfb0821b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6716c48e1b15090692ba2eabdfb0821b_JaffaCakes118
Size

172KB
MD5

6716c48e1b15090692ba2eabdfb0821b
SHA1

79cdae407ade0e6345cbe94c351cd08d96cbf8dd
SHA256

6c9998169d3facfbd8e18561a312b58533ba5e48057f0f44ce0bbda9ac3e7770
SHA512

780daf83fa4f8075b3cfd44075159297f4b62a2d9bdd6b6c4e0d8e07f5c01cfc11295305354b9c59b50ab231a31c3a4ed22f4a33b45bc872500aacf2ac4e39a1
SSDEEP

3072:iwN0Ules0vhH+L/SrQOmbuD4HwCWN39kOpbLPlSrJuxXeJAhgVi9XO4XxMZvxSNN:PuDsOhH8/Srnm64H+N3VNRSrJuxsGgEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6716c48e1b15090692ba2eabdfb0821b_JaffaCakes118

Files

6716c48e1b15090692ba2eabdfb0821b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd6f452ad9cce2f335717daf96a1ab7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetAtomNameW
LoadLibraryW
LeaveCriticalSection
SetEvent
EnterCriticalSection
GetTickCount
IsDBCSLeadByte
ResetEvent
lstrcpyA
GetTimeZoneInformation
InitializeCriticalSection
DeleteCriticalSection
EnumResourceNamesA
FileTimeToSystemTime
LoadLibraryA
QueryMemoryResourceNotification
OutputDebugStringA
GetTempPathA
GetFullPathNameW
GetFullPathNameA
Sleep
GetProcAddress
WaitForSingleObject
FreeLibrary

winmm

mciSendCommandA
sndPlaySoundA

shlwapi

PathAddBackslashA

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ