a1a2ab65154de952a926197aaca765a9_JaffaCakes118 | Triage

Sharing

General

Target

a1a2ab65154de952a926197aaca765a9_JaffaCakes118
Size

86KB
MD5

a1a2ab65154de952a926197aaca765a9
SHA1

757f32420e2137a20ab5b1f3056d40e1e9189bdc
SHA256

dfdf7338d6cd85d9dc8bdbdd45bdf799010cc7f8726ac4b044627aa5ada49ec6
SHA512

7f3d0fb33a85351d7f693bc886612d883269508ec9ce79972be9cc0a2f3ec166ba1f72f84119f34960e07f192be882e82eca0d35af5cf843096363e1690a244a
SSDEEP

1536:tUzte7aVoxagfKLO7RIvTbJHO4akynOSqds7dV1BYqDaM7CVelydNRNl:uztsaR3uI7bJ7Sqd+6qeel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1a2ab65154de952a926197aaca765a9_JaffaCakes118

Files

a1a2ab65154de952a926197aaca765a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66e18d30d2698596a80d8cf1a91ce450

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetSystemDirectoryA
GetCurrentThread
CreateMutexA
GetCurrentDirectoryA
GetCurrentThreadId
GetVersionExA
GetWindowsDirectoryA
GetCurrentProcess
LocalFree
ExitProcess
SleepEx
VirtualAlloc
LocalAlloc
GetCurrentProcessId
GetStdHandle
GetComputerNameA

advapi32

GetUserNameA

user32

GetSystemMetrics
GetActiveWindow
GetForegroundWindow

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ