7488c2a4bf4b25152808727adb4d7ccd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7488c2a4bf4b25152808727adb4d7ccd_JaffaCakes118
Size

391KB
MD5

7488c2a4bf4b25152808727adb4d7ccd
SHA1

913424f49982eeccc3d989ffbb9f7dfa5f3da6dc
SHA256

8a676c57cff45b1c01402d1f3fbf5002bc9bbb60905cf3806aa70d36c3cb30b3
SHA512

5264c25779e311395c24178af871c4089629bb51be3852ed696338a40ca8d6c73e1683cb5ab33d532578de212bd5a592d15a9f618f648ac002838488f4026d1b
SSDEEP

12288:5RMBHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:5RMBkAJLjpFvN/ytkjEOfoMWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7488c2a4bf4b25152808727adb4d7ccd_JaffaCakes118

Files

7488c2a4bf4b25152808727adb4d7ccd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c206fd1b35cd2362ed25137e478716ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
GetCurrentThreadId
LoadLibraryW
ReleaseMutex
GetCurrentProcessId
FindClose
LocalFree
ReleaseMutex
lstrlenW
IsBadStringPtrW
TlsGetValue
WriteFile
GetPrivateProfileStringA
HeapCreate
CreateEventW
FindAtomA
GetDriveTypeA
GetFileTime
GetEnvironmentVariableW
GlobalFlags

user32

GetSysColor
DrawStateW
GetKeyboardType
CallWindowProcW
GetClassInfoA
CreateWindowExA
DispatchMessageA
GetClientRect
IsWindow
SetFocus
GetSysColor
DrawTextA
EndDialog

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 381KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ