768169c0ee37b364278a55a77901d110_JaffaCakes118 | Triage

Sharing

General

Target

768169c0ee37b364278a55a77901d110_JaffaCakes118
Size

77KB
MD5

768169c0ee37b364278a55a77901d110
SHA1

f43516679fa098605b6a6c94bd4241eefdd6fb38
SHA256

57b87b66cc53879cdce1da438662cf5b567b6d266068fa1b07a593344d0734a1
SHA512

03175f4cdd2dbeca5f93f4a23379ca101afd353fad654185cfd6300a2788331daa7144c1c78520aa28c87f5f6d191e136e88f30b0ca3443b1a12f33c1f20fcf5
SSDEEP

1536:tuM2MIGLUZW8wRCphrMvXqOSz+QSjucAVL1/naMkVhT0/Y5LevlK:cXZRwqIvaOJjVAVxyMkDw/3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
768169c0ee37b364278a55a77901d110_JaffaCakes118

Files

768169c0ee37b364278a55a77901d110_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06c26d512309d13e0b35f88fa90e00d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetCurrentDirectoryA
GetWindowsDirectoryA
CreateEventA
GetComputerNameA
GetVersionExA
GetCurrentThread
GetCurrentProcessId
CreateMutexA
ExitProcess
SleepEx
VirtualAlloc
GetCurrentProcess
GetStdHandle
LocalAlloc
LocalFree
GetCurrentThreadId

advapi32

GetUserNameA

user32

GetForegroundWindow
GetActiveWindow
GetSystemMetrics

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ