95ee2d9a50d04d2da8486695b62bb210_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95ee2d9a50d04d2da8486695b62bb210_JaffaCakes118
Size

139KB
MD5

95ee2d9a50d04d2da8486695b62bb210
SHA1

8b0ada6acb0282e53582cbb19e426a38370e3536
SHA256

453bab9c76436542fb4d655f841604485a4d8ae5dc03134666b210cc7ec20c32
SHA512

fb45d4d9fa3ba8ed53901b6b3a23e2673d6c876cc81a4c9c02ca6ee8ad9d24d7bd9b69ac698e5afc93f5770e977a6cc33c202259aef2905a182ddef7ca412761
SSDEEP

3072:KaOeTF25z7ELd2EUjG8oaqsUrrsFh+fqnxzFlfh3ktOWv:KjmOwve+abKrsF4fOFl53kkm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95ee2d9a50d04d2da8486695b62bb210_JaffaCakes118

Files

95ee2d9a50d04d2da8486695b62bb210_JaffaCakes118
.exe windows:4 windows x86 arch:x86

befd53806bc4f9b95f247c26694f30cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageA
CharNextA
CharUpperA
PostThreadMessageA
KillTimer
GetMessageA
SetTimer
LoadStringA

kernel32

ExitProcess
ClearCommError
CreateFileMappingA
QueryPerformanceCounter
ClearCommError
GetExitCodeProcess
EnumResourceNamesW
CreateMutexA
CreateProcessW
ExitProcess
MapViewOfFile
GetStartupInfoA
ReleaseMutex
GetModuleFileNameW

shlwapi

PathFindExtensionA

rpcrt4

RpcBindingSetAuthInfoA
RpcBindingFromStringBindingA
NdrClientCall
RpcStringBindingComposeA
RpcStringFreeA

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ