a328960153b0f8da1b7dae3ccffcbe10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a328960153b0f8da1b7dae3ccffcbe10_JaffaCakes118
Size

112KB
MD5

a328960153b0f8da1b7dae3ccffcbe10
SHA1

415a12b58bd297e9fd41ee65525678e2ed03fe0c
SHA256

15cd3b40192c9d8911876b99877d75cd63acee1a9cbf4e7825e36654bc5fd862
SHA512

fe301fad4768e7bdc065ed1acb254e670ba1ca08a203d63723803585fcd599d03829073d869f6b017f08bb626cdd073fff93206bf3ff73a8465d09b9f19178d1
SSDEEP

1536:GahWu0Nn6ghtbcck8AFoEmot8Rf7SrsB8pGrMWmB6BozPD+Y57mFjpUGD:JPw6YtbhwHORfwEMWmU2+0YNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a328960153b0f8da1b7dae3ccffcbe10_JaffaCakes118

Files

a328960153b0f8da1b7dae3ccffcbe10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a50c517dc92415e84922d9efdc918db0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZCopy
WriteProfileStringA
CreateTimerQueueTimer
SetVolumeMountPointA
ExitProcess
GetPrivateProfileSectionNamesW
SetTimerQueueTimer
GetCurrentConsoleFont
FreeLibrary
GetWindowsDirectoryA
VirtualAllocEx
GetCommandLineW
GetCurrentProcess

user32

LoadBitmapW
MonitorFromRect
LockWindowUpdate
OemKeyScan
SendMessageCallbackA
IsDialogMessageA
DlgDirListComboBoxW
GetWindowRgn
MessageBoxIndirectA
IsWinEventHookInstalled
InvalidateRect
RegisterServicesProcess

gdi32

SetBoundsRect
PolyTextOutA

Sections

.text
Size: 100KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textbbs
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ