a30b2d5a25db1901f34ad53991ba274c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a30b2d5a25db1901f34ad53991ba274c_JaffaCakes118
Size

6KB
MD5

a30b2d5a25db1901f34ad53991ba274c
SHA1

96b5f89a5c927b108314c5aba8039aa09018fe54
SHA256

d9928cd47ecd203179e88a4a1b144b37cab23ca072fa5b045348f805cd2e587d
SHA512

dd6f93074bf37d589e75883758f0ad8cff7f2cc44fb4ef3161c28dbb3d286d1c1ecc0fc567fa746a539e8bca5c52cab6302777cb9c6ffd844d06e2ac879abbfb
SSDEEP

48:iNmHr+aYAA2kH0A2cyT5uDzLlk4AxaAd+Mw/iUax0yZ34nXlJJCMF4CnFgBoBAsX:U2rPbOQcOg+KU0Xrl1mgtZwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a30b2d5a25db1901f34ad53991ba274c_JaffaCakes118

Files

a30b2d5a25db1901f34ad53991ba274c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

84a60ad50d7db6e6ebf635460bf918ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateFileA
DeleteFileA
GetModuleHandleA
GetProcessHeap
CloseHandle
HeapReAlloc
lstrlenA
lstrcpyA
ExitProcess
HeapFree
HeapAlloc
CreateDirectoryA

gdi32

CreatePen
CreateSolidBrush
CreateFontA
SelectObject
DeleteObject
Rectangle
SetTextColor
SetBkColor
TextOutA

user32

TranslateMessage
GetMessageA
GetDC
DispatchMessageA
RegisterClassA
LoadIconA
LoadCursorA
PostQuitMessage
DefWindowProcA
SetWindowTextA
CreateWindowExA

shell32

SHFileOperationA
ShellExecuteA

shlwapi

PathFileExistsA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 563B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ