a0ec13fde4775e86438e20dea23ec407_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0ec13fde4775e86438e20dea23ec407_JaffaCakes118
Size

1.2MB
MD5

a0ec13fde4775e86438e20dea23ec407
SHA1

b5d143b288df9c9e799ba8c57fbad0d12f4d2d18
SHA256

d86267d294d72628bcc348ab1d91adbdb85d95b200e88de448da2e12a1fdb9d0
SHA512

d5e341e11a9663016bd122224a887415406fb5b72431174890d322489810195a7d1d4ef3205258020da413b21fd9892ccf5db064f20d735fecf5505b153c9bf8
SSDEEP

12288:q3cStph4p9vLXmheFs6I2Z/LLrHb1Gz687V2D7kKOjjNHYq:q3cGmLWeFvD3rHbsnwD7k3jlYq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0ec13fde4775e86438e20dea23ec407_JaffaCakes118

Files

a0ec13fde4775e86438e20dea23ec407_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0fde24ab062e5811a75fe0dec081432

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
SetWindowLongW

kernel32

TlsFree
TlsAlloc
TlsGetValue
TlsSetValue
VirtualProtect
SetPriorityClass
GetACP
GetModuleFileNameA
CloseHandle

d3d9

Direct3DCreate9

Sections

.text
Size: 591KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 784KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ