954d73edcdae008a8ed5c8fda907a9e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

954d73edcdae008a8ed5c8fda907a9e1_JaffaCakes118
Size

370KB
MD5

954d73edcdae008a8ed5c8fda907a9e1
SHA1

c2fcbe405b4023e3685e6b9727c9c39926e7daf3
SHA256

035a4deda59831aece4500b6f520c9c48dfb1ef0f886c2fc4e0a9aa73226179a
SHA512

212320ced9176deb1c075fb6f97c7843b97cb9b823c63b7fa704ea58ffed3b3fb2afd520e28b50b5fea6794092aefdbadeefa6efa2be6323b27e5d354d19c6dc
SSDEEP

6144:4TA3s6GyC2Cy8fumy5UGR6go/pnGSBR0HfYHkImafR7pgXcHBf5NUpY/HzERKK:YA8z52CFumQUGQgoRGM0HfYAkRZd5mWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
954d73edcdae008a8ed5c8fda907a9e1_JaffaCakes118

Files

954d73edcdae008a8ed5c8fda907a9e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f54919547e5bf56c00211997f89094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
GetModuleHandleW
InterlockedExchange
ResetEvent
FreeConsole
LocalFree
VirtualAlloc
GlobalFree
GetDriveTypeW
CreateThread
ReleaseMutex
lstrlenA
CreateFileW
GetExitCodeProcess
GetMailslotInfo
LocalSize
GetACP
ReadFile
FindVolumeClose
CloseHandle

user32

GetKeyboardType
DrawStateW
SetFocus
GetSysColor
EndDialog
GetCursorInfo
GetClassInfoA
DispatchMessageA
GetClientRect
CreateWindowExA
GetDlgItem
CallWindowProcW
IsIconic

dsprop

CheckADsError
ReportError
CheckADsError
CheckADsError
CheckADsError

desk.cpl

InstallScreenSaverW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ