6ff0da4a3da8344c750edf23c4ba818a_JaffaCakes118 | Triage

Sharing

General

Target

6ff0da4a3da8344c750edf23c4ba818a_JaffaCakes118
Size

326KB
MD5

6ff0da4a3da8344c750edf23c4ba818a
SHA1

84c8d70686774b9eff267f06580e6f0fa8466bf5
SHA256

120c4d90d8a2eab4da9950fe08f42442d2fa5a4950a6295b23a5d4d8d1d8be83
SHA512

99ffda8bf06c831b8236b66d45d1d30a8f948317c187969a49c1e7793d2052bda2487458560dfa54047cac8619fa51059f96e0ec83e61535b2616e0094024866
SSDEEP

6144:JqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:vO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff0da4a3da8344c750edf23c4ba818a_JaffaCakes118

Files

6ff0da4a3da8344c750edf23c4ba818a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9447df289ab7831d9f06579d7b6cb0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
GetModuleHandleA
GetDateFormatA
GetCommandLineW
Sleep
FindVolumeClose
LocalFree
GetComputerNameA
CreateThread
ResetEvent
CloseHandle
UnmapViewOfFile
GetSystemTime
GetDiskFreeSpaceA
lstrlenA
CreateFileA
GetTickCount
LoadLibraryW
HeapCreate
SetLastError

user32

GetComboBoxInfo
GetDC
DrawStateA
DrawMenuBar
DispatchMessageA
GetDlgItem
FillRect
CreateWindowExA
SetFocus
CallWindowProcA
CheckRadioButton
IsWindow
DrawEdge

advapi32

RegEnumValueA
RegCloseKey
FreeSid
IsTokenUntrusted
RegDeleteKeyA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ