71f99f94df72e4de5436183b67da29e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71f99f94df72e4de5436183b67da29e8_JaffaCakes118
Size

372KB
MD5

71f99f94df72e4de5436183b67da29e8
SHA1

af5575ae45ce58619035c33c8b3dc344a9ca3ed4
SHA256

da4a3031e94b544340a1cd37048d36703fb8a4fb6a9277a9a9ad4d381cf4444e
SHA512

2dc7d532f07abcdfbb04690761a1e68e1d869e6f9e06251f305ee960a7c701df01d1df03db900b5f102eff76de640f239c0301b8e60f0ad9e8c409e91986f1d8
SSDEEP

6144:uNBTRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:oneF8m4ewS/HcF+ih7wp10l1h+TxqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71f99f94df72e4de5436183b67da29e8_JaffaCakes118

Files

71f99f94df72e4de5436183b67da29e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79aed5c0d5548b0c8b62e64cf054ec23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetTickCount
GetModuleHandleW
ReadFile
GlobalFree
GlobalSize
ExitThread
GetExitCodeProcess
VirtualAlloc
FindVolumeClose
CreateFileA
FreeConsole
LocalFree
SetEvent
GetPrivateProfileIntW
lstrlenA
GetDriveTypeA
GetLocalTime
CloseHandle
GetComputerNameW

user32

GetKeyState
GetClientRect
CallWindowProcA
FillRect
GetMenu
EndDialog
DispatchMessageA
DrawStateW
CreateWindowExA
GetDlgItem
GetCaretPos
GetClassInfoA
GetCursorInfo

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate

msexch40

DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ