77070ceb269a6ee4831dceb520fa1dd5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77070ceb269a6ee4831dceb520fa1dd5_JaffaCakes118
Size

183KB
MD5

77070ceb269a6ee4831dceb520fa1dd5
SHA1

a5fe671fa80252d552f8867813d49804eafb5602
SHA256

b628b0da1889df6d51e7225c486eaf2194420dbc2332d1f80f3c971a6bc6d89d
SHA512

cd07b56d9082610f8d4a17b145dd52ca4a2d680345d85882a6da3a8501b2897fbf987a5f5bce75939a0488d83440455d060930fbbe895594f536086b7a3f8247
SSDEEP

3072:D+CDQ1BkYRgderDKwLjFh0Icy2bh17+MnaGok0rT9kcJUC3Wk1fncomE74F5VBCn:/DQPLRLrD9dcfVp1a5k0rhPJUC311fci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77070ceb269a6ee4831dceb520fa1dd5_JaffaCakes118

Files

77070ceb269a6ee4831dceb520fa1dd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e21466afc85056ca0fd764dea17e813a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
GetCurrentThreadId
CreateTimerQueueTimer
CreateFileA
InitializeCriticalSectionAndSpinCount
GetStringTypeExW
GlobalLock
GetConsoleAliasExesA
CreatePipe
WritePrivateProfileStructW
GetTempFileNameW
TryEnterCriticalSection
GetEnvironmentStringsW
GetTickCount
GetCurrentThreadId
GetTapeStatus

user32

TranslateMessageEx
AttachThreadInput
CallMsgFilter
SetWindowTextA
TrackPopupMenu
CreateWindowStationA
SendMessageW
MB_GetString
SubtractRect
GetDialogBaseUnits

Sections

.text
Size: 9KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 170KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ