a21c7ff3dcfc6153c2f21b6ee9f4d966_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a21c7ff3dcfc6153c2f21b6ee9f4d966_JaffaCakes118
Size

135KB
MD5

a21c7ff3dcfc6153c2f21b6ee9f4d966
SHA1

0da4f0493240c770a3edf1f3ef087c24d70d9718
SHA256

1ae356cf72047347b02ae60c5470e7b810a08ff462fa6519e4cbd59ed703fc5c
SHA512

24421a090dc914fa6352df8f258c78ac91702cbf0f4142dfb699d10e98a08ea871e3d1b4bc27211f752faffc82dbcf594d74570dc66d48b88db38aad6fec1e32
SSDEEP

3072:12lXdbRYZNQrEgpAADYnzdP87VGATSJK9YpdWlZry8/:1UX7l7hDYn9zAebsZry8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a21c7ff3dcfc6153c2f21b6ee9f4d966_JaffaCakes118

Files

a21c7ff3dcfc6153c2f21b6ee9f4d966_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c5ec30f5993d045af8f2b75cbeb958f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
SetTimer
GetMessageA
PostThreadMessageA
CharNextA
PeekMessageA
KillTimer
LoadStringA

rpcrt4

RpcBindingSetAuthInfoA
RpcStringBindingComposeA
RpcBindingFromStringBindingA
NdrClientCall
RpcStringFreeA

kernel32

ClearCommError
CreateProcessW
GetExitCodeProcess
GetStartupInfoA
ClearCommError
CreateFileMappingA
EnumResourceNamesW
CreateMutexA
QueryPerformanceCounter
ExitProcess
ReleaseMutex
ExitProcess
MapViewOfFile

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ