0175c97bf9005233409e0f46e25cd532_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0175c97bf9005233409e0f46e25cd532_JaffaCakes118
Size

870KB
MD5

0175c97bf9005233409e0f46e25cd532
SHA1

1f09fa071ca6b06c381519079068e8dbdecdbad5
SHA256

f95fb868000ce41db12cde4b61666d658684ab5ba705403900edeea12e782f23
SHA512

44d05baec226749c1ae591c4a03227efacf97ce5059f7ffac7517ab2f03a46da0eda42ec2a736ae3b7a374cec586f648947346c1166da18dc865884b7699b599
SSDEEP

12288:a05YhVzticW+o2Go7bxqEkF17tnazXRaXcXr/FD+793tLo/FEu3juFg:aBhicW9V7NazBaNj+uF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0175c97bf9005233409e0f46e25cd532_JaffaCakes118

Files

0175c97bf9005233409e0f46e25cd532_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24b6ee35873b9cf0df9ec1e0b50e4ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
ReleaseMutex
IsDebuggerPresent
TlsGetValue
TlsAlloc
GetStartupInfoA
GetDriveTypeA
HeapCreate
Sleep
DeleteFileA
GetACP
lstrlenA
CreateFileA
SuspendThread
GetModuleHandleA
CreateFileMappingA
PulseEvent
GetModuleFileNameW
GetFileAttributesA
IsBadStringPtrA

user32

DrawTextW
FindWindowW
IsWindow
GetIconInfo
LoadImageA
DispatchMessageA
DestroyMenu
DestroyWindow
DispatchMessageA
GetWindowLongA
IsZoomed
PeekMessageA
CallWindowProcW

asycfilt

FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance

cryptui

WizardFree

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ