6830343b665946ee95405c48a201db89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6830343b665946ee95405c48a201db89_JaffaCakes118
Size

336KB
MD5

6830343b665946ee95405c48a201db89
SHA1

2be78a90631fce17768fc05b4ccd303733ecee7f
SHA256

b68bf175a05beed206399e551aa70eeb1ecb462c27c83eca33bf20227511ecb0
SHA512

867a679757f6ef92385f01d3ff740054cc9cea466eea0f2296a935b29284dd422086d2bcdaeeaeeb05052b417c19ff530ee37e8d79e8d39f55326d55ac825535
SSDEEP

6144:XiX28TgUq0AOprEd0PYgefO1gXAWLpXykZDvH5mN5C1fr/zEabXw10FVZEnOX:yGagUquArbfQgQWdyKzZFZ0abXw10FVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6830343b665946ee95405c48a201db89_JaffaCakes118

Files

6830343b665946ee95405c48a201db89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc6162fd57950204e2853f65e5a1bb83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
CloseHandle
GetModuleHandleA
GetSystemDirectoryA
CreateSemaphoreA
SetEvent
GetProcAddress
GetSystemTime
ExitProcess
lstrlenA
GetLastError
GetEnvironmentStrings
UnmapViewOfFile

user32

GetClientRect
wsprintfA

gdi32

GetPixel
CreateBrushIndirect
CreatePatternBrush

advapi32

AddAce
CopySid

ole32

CoUninitialize

avifil32

AVIStreamCreate

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ