71cc36194dbdd2e88e8c8b98ad2e90e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71cc36194dbdd2e88e8c8b98ad2e90e7_JaffaCakes118
Size

372KB
MD5

71cc36194dbdd2e88e8c8b98ad2e90e7
SHA1

70e05e1d6e1960b17146ebfa8288e94d93783cf5
SHA256

8fb5f69d8f193bafb1ff0d2a1d79fc5d8fa52361ac55a34dea73508670b4f001
SHA512

9dfcbf1ee0684acfff508e3b632be4c5e9938da4560e5d76e935b0a83181f8d4f774484a5e0e99c61057bf9b66556eac58fba3c81fc743d75b9ac08d293a5118
SSDEEP

6144:7BPDjRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:7BLjneF8m4ewS/HcF+ih7wp10l1h+Txd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71cc36194dbdd2e88e8c8b98ad2e90e7_JaffaCakes118

Files

71cc36194dbdd2e88e8c8b98ad2e90e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e4e8b380286b01532e223803c24c657

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
GetDriveTypeA
LocalFree
GlobalFree
VirtualAlloc
ExitThread
GetComputerNameW
GetLocalTime
GetModuleHandleW
FreeConsole
SetEvent
GlobalSize
lstrlenA
FindVolumeClose
GetTickCount
CreateFileA
GetPrivateProfileIntW
CloseHandle
ReleaseMutex
ReadFile

user32

DrawStateW
GetCursorInfo
GetClientRect
CallWindowProcA
FillRect
GetDlgItem
EndDialog
GetClassInfoA
CreateWindowExA
GetKeyState
GetMenu
GetCaretPos
DispatchMessageA

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

msexch40

DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ