a4d7aba08be415f36ca78e109af7f9d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4d7aba08be415f36ca78e109af7f9d7_JaffaCakes118
Size

370KB
MD5

a4d7aba08be415f36ca78e109af7f9d7
SHA1

f979601a74d908b86ef154830a33e9f8166206c7
SHA256

4c78f805d0a6a8141046f0637935b758dcb50e5b6fd38b65049e0141a40eb251
SHA512

72ead48c287bb5cf65541cf86d2abc26f07e8e8612887ff356e31c6632e11f90e72ae7a6f44c758356a7d7aeac4323db64125371e4450f185d98edc5efd2a5d6
SSDEEP

6144:XGTA3s6GyC2Cy8fumy5UGR6go/pnGSBR0HfYHkImafR7pgXcHBf5NUpY/HzERKK:XaA8z52CFumQUGQgoRGM0HfYAkRZd5mH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4d7aba08be415f36ca78e109af7f9d7_JaffaCakes118

Files

a4d7aba08be415f36ca78e109af7f9d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f54919547e5bf56c00211997f89094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
GetModuleHandleW
InterlockedExchange
ResetEvent
FreeConsole
LocalFree
VirtualAlloc
GlobalFree
GetDriveTypeW
CreateThread
ReleaseMutex
lstrlenA
CreateFileW
GetExitCodeProcess
GetMailslotInfo
LocalSize
GetACP
ReadFile
FindVolumeClose
CloseHandle

user32

GetKeyboardType
DrawStateW
SetFocus
GetSysColor
EndDialog
GetCursorInfo
GetClassInfoA
DispatchMessageA
GetClientRect
CreateWindowExA
GetDlgItem
CallWindowProcW
IsIconic

dsprop

CheckADsError
ReportError
CheckADsError
CheckADsError
CheckADsError

desk.cpl

InstallScreenSaverW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ