940711060ae1aa7dd505dbee5c4e6f85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

940711060ae1aa7dd505dbee5c4e6f85_JaffaCakes118
Size

18KB
MD5

940711060ae1aa7dd505dbee5c4e6f85
SHA1

87cc88434361a79e49aafd3e6cc881f5b66022cc
SHA256

623b0c6df6fa256e0e4302c45789ae0e91ca0819feb416c84bbc1079ca3552c7
SHA512

416d1578a4532117612b6194c546b5a029df54c14b2d9a06c5def6cc394c91918c5fe10ad6258dbc2abcb1fe5e5b4f111daa5f500d81757475859905b4c1aa45
SSDEEP

192:Nkj5ZwHnTC2C3mmdZGY1bPFAjr83XfAgKtZf+VvyreImdNDu8iVLK9ZE:MyHQDZGY17KE/AgFVzDu8mLuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
940711060ae1aa7dd505dbee5c4e6f85_JaffaCakes118

Files

940711060ae1aa7dd505dbee5c4e6f85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

946293b00396c41a9e605bfd6ad09101

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
WriteFile
DeleteFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetSystemDirectoryA
WaitForSingleObject
SetThreadPriority
GetModuleFileNameA
TerminateProcess
OpenProcess
CreateEventA
OpenEventA
Process32Next
Process32First
CreateToolhelp32Snapshot
Thread32Next
Thread32First
LoadLibraryA
ExitProcess
GetWindowsDirectoryA
CreateFileA
GetFileTime
SetFileTime
GetCurrentProcess
CreateThread
CloseHandle

user32

EnumThreadWindows
GetWindow
FindWindowA
SendMessageA
GetClassNameA
PostMessageA
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DrawIcon
wsprintfA
GetWindowTextA

gdi32

DeleteObject

advapi32

OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ