826942d0cd43bb24e30a8cfecc36e7d3_JaffaCakes118 | Triage

Sharing

General

Target

826942d0cd43bb24e30a8cfecc36e7d3_JaffaCakes118
Size

202KB
MD5

826942d0cd43bb24e30a8cfecc36e7d3
SHA1

2091964fd673abb067832aa2035e41216f1d0a1f
SHA256

40031526c496e21c14bc37ad7480e6732261d055bfcdc9e2a7062ef1f4a17608
SHA512

058d1ef47047d9a0a511eb618f47ea0e00584761c8c95e19e5518e5200de219719367c25b056e1aed4563352744f9dfe56c75a29c022f1c807a0b2dc2de29603
SSDEEP

3072:NDa9VtsIwpzaUDP/Zat+Vy+GcQzeWoNyTIv/HcZqgcWQ6o/gMx:NDaR/w/78+LWoNVMI6+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
826942d0cd43bb24e30a8cfecc36e7d3_JaffaCakes118

Files

826942d0cd43bb24e30a8cfecc36e7d3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

702860aa15958627d29f7bb62f75504b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetDC
GetSystemMetrics
CharNextA

kernel32

RemoveDirectoryA
SetLastError
GetConsoleOutputCP
lstrlenA
GetACP
lstrlenW
GetModuleHandleA
GetCurrentProcessId
GetDriveTypeA
MulDiv
CopyFileA
lstrcmpiW
GetVersion
GetCurrentProcess
GetStartupInfoA
GetModuleHandleW
lstrcmpiA
SetCurrentDirectoryA
Sleep
GetCurrentThread
GlobalFindAtomW
IsDebuggerPresent
LoadLibraryW
GetLastError
QueryPerformanceCounter
GetProcessHeap
GetOEMCP
lstrcmpA
GetCommandLineW
GetUserDefaultLangID
GlobalFindAtomA
DeleteFileA
DeleteFileW
GetThreadLocale
VirtualAlloc
GetWindowsDirectoryA
GetCommandLineA
GetCurrentThreadId
GetTickCount

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ