706e01cc2cfbe294115c868164b01a0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

706e01cc2cfbe294115c868164b01a0c_JaffaCakes118
Size

279KB
MD5

706e01cc2cfbe294115c868164b01a0c
SHA1

2fb30b637d6fad8bebbe4e27feae38e028b9a3b8
SHA256

bc289cb75ce8cc358ac3aa71ba0ce8224c6f7ed82c42506a7509c84ab8664bd8
SHA512

d5f55660b47bd7fe3c7debbbcf0d57ed91ad2ad90b9392ea546cba342a78155729cffaafeb8863f9bc646caa4686815aec20fef6ec1578fb18a13848a83c4ebf
SSDEEP

3072:Z0DlwhHfvCJXsvlVYdV1qkxf9rQpB8Xm3vJSTGM8SlIk33x06zpnKUKE4dtxKQFO:aDa/6tkvK1tVrQp4hR8SlB3x0+KEDQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
706e01cc2cfbe294115c868164b01a0c_JaffaCakes118

Files

706e01cc2cfbe294115c868164b01a0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

850a60e25d1ed7de74b126955c5d80e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
EnterCriticalSection
ExitThread
GetThreadLocale
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetEvent
Sleep
TerminateThread
WaitForSingleObject
WriteConsoleA
lstrcmpA
lstrlenA

user32

FindWindowW
GetDC
RegisterWindowMessageW
SetScrollPos
SetWindowPos
EnumDisplaySettingsA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ