78adee8945e38df806389caaed7e1cd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78adee8945e38df806389caaed7e1cd9_JaffaCakes118
Size

158KB
MD5

78adee8945e38df806389caaed7e1cd9
SHA1

146c8ec37f47889e5a36a66700e1cd2686e2cb91
SHA256

c1b9bcbb6a613c281374452a641007e6bdcede8b0601e16cf33edf1789e89a3d
SHA512

c212e4931ded7676d72059b82823e83c8ec5946db403028f7ca3de3c950b5719d07c364bb29a93b03fd86a43ea3a86b7feadb17d808662a52d939cc23f335e32
SSDEEP

3072:XMsfFWKC4CT7gMpfT3cyZZJv4WQwlZ6lqZSmoTbf7N7:XMsh0J3cYZJvZllg97

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78adee8945e38df806389caaed7e1cd9_JaffaCakes118

Files

78adee8945e38df806389caaed7e1cd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac8a030fd7840a2231340810a2729225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ExcludeUpdateRgn
ValidateRect
ValidateRgn
GetWindowInfo
SetCapture
GetCapture
ReleaseCapture
InvalidateRgn
GetUpdateRgn

kernel32

FileTimeToLocalFileTime
SetCurrentDirectoryW
GetNextVDMCommand
FreeLibrary
SetThreadPriority
GetStringTypeW
CompareStringA
GetLocalTime
FindFirstFileW
LocalFileTimeToFileTime
FindResourceW
SetErrorMode
EnumResourceNamesW
SystemTimeToFileTime
RegisterWaitForSingleObject
GetShortPathNameW
FileTimeToSystemTime
FindClose
FindNextFileW
SetEnvironmentVariableW
LoadResource
SearchPathW

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ