703e38d0605517f55aa39a0c39b612b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

703e38d0605517f55aa39a0c39b612b9_JaffaCakes118
Size

775KB
MD5

703e38d0605517f55aa39a0c39b612b9
SHA1

13ec4c5aa2e2aa2149db8960654d41d3933947ae
SHA256

e83b748ea8d0a747f570c275c889172cd4e8a8cd61391084bef69468fc3c4631
SHA512

fdcc48c7fdcc79decd24e8122b5a69ea4335e384da43895e3c3856065579a0325065ed5bd304ecb64978dbc1046186c0604346690a44907a6b2accbb77eea364
SSDEEP

12288:hiLRTwR0lKczE5sFlqWUz2iEJoxPKnqsGr4v4eXgjG74k8ogSday4TGRwBcsgZHL:hKUWKV5wMEJoRuLGReX9ghT0Yghf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
703e38d0605517f55aa39a0c39b612b9_JaffaCakes118

Files

703e38d0605517f55aa39a0c39b612b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38ccdf849dbf98bc45b20cac210f3dfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
FindResourceA
GetStdHandle
GetCurrentThreadId
CreateFileA
GlobalUnlock
CloseHandle
HeapCreate
SetLastError
GetPriorityClass
CreateMutexA
VirtualQuery
GlobalFree
GetModuleHandleA
TlsGetValue
GetExitCodeProcess
LoadLibraryExW
DeleteAtom
SetEnvironmentVariableA
lstrlenW

user32

DrawMenuBar
CheckRadioButton
GetDlgItem
DispatchMessageA
CallWindowProcA
GetDC
SetFocus
CreateWindowExA
FillRect
DrawEdge
CreateMenu
IsWindow
GetIconInfo

ntshrui

GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
IsPathSharedW
GetLocalPathFromNetResourceA
IsPathSharedA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE