6ada5e5e003ed33f85978ec1bd0c9608_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ada5e5e003ed33f85978ec1bd0c9608_JaffaCakes118
Size

206KB
MD5

6ada5e5e003ed33f85978ec1bd0c9608
SHA1

696c05f5e72c603d6770c50a532f6b235d1d89e4
SHA256

d60c40844456a0a8c8b487a35035e3639d6f0c35b3f8eabdb29229a1064d6b5d
SHA512

cf3908afad2515381ff67fe24b4bb6d78d45e25525597a0c8918b260123a16d16c9f06c762ece568ca95386b945f51317a327835ec1c03aac4e42cffdb65a96b
SSDEEP

6144:cwzFkiCec/6jfowyA9WOC5H7RsmB1UnZIxl:cwRi/ofoTA0hH7Rsg1UZI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ada5e5e003ed33f85978ec1bd0c9608_JaffaCakes118

Files

6ada5e5e003ed33f85978ec1bd0c9608_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0eff125fe2e67366e1cc7e28f3665cdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgCtrlID
RegisterClassExA
BeginPaint
WindowFromDC
EndPaint
EnableWindow
SetWindowTextA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

CreateColorSpaceA
DeleteColorSpace
GetStockObject
CombineRgn
GetDeviceCaps

shlwapi

SHAutoComplete

kernel32

InterlockedExchange
lstrlenW
InitializeCriticalSection
GetStartupInfoA
LeaveCriticalSection
DeleteCriticalSection
SetFileAttributesA
GetEnvironmentStrings
GetTickCount
GetACP
HeapFree
HeapDestroy
EnterCriticalSection
HeapCreate
HeapAlloc

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ