7738910ea3c741a8e34cb45891244ae6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7738910ea3c741a8e34cb45891244ae6_JaffaCakes118
Size

196KB
MD5

7738910ea3c741a8e34cb45891244ae6
SHA1

1744549ace12351994ad775d21dc1a3a6f5052c3
SHA256

389dd9dcf8cbc24224ad7e4e518691b7f06f07f4176ca3922d16794d84f6a9ee
SHA512

73d0f33e6bef5e79eba5146fb8354ac9e9a58a61b64d586549280133de66a1cdc618ef4554f2ffb6845172ad73680eca71d75661f37a4832ca48e9f4aea08360
SSDEEP

3072:wP8Sl/LD/RbmmA9RSVXR41D2TdBvHDHsIARCuciIuidm1:axSDen41DKvjHsIAKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7738910ea3c741a8e34cb45891244ae6_JaffaCakes118

Files

7738910ea3c741a8e34cb45891244ae6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

acc7bcca29d256dc8259d522a0dd88da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
GetDesktopWindow
GetDC
CharNextA

kernel32

GetOEMCP
GetUserDefaultLangID
GetThreadLocale
GlobalFindAtomW
GetLastError
GlobalFindAtomA
SetLastError
IsDebuggerPresent
GetVersion
lstrcmpA
GetCommandLineW
GetCurrentThreadId
GetConsoleOutputCP
DeleteFileW
GetStartupInfoA
RemoveDirectoryA
GetModuleHandleA
SetCurrentDirectoryA
lstrlenW
GetCommandLineA
GetModuleHandleW
Sleep
GetCurrentProcess
MulDiv
GetTickCount
GetACP
GetProcessHeap
GetDriveTypeA
LoadLibraryW
GetWindowsDirectoryA
CopyFileA
lstrcmpiW
lstrcmpiA
DeleteFileA
GetCurrentThread
QueryPerformanceCounter
lstrlenA
GetCurrentProcessId
VirtualAlloc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ