a5a62192112da5bc2573931d2a0d5650_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a62192112da5bc2573931d2a0d5650_JaffaCakes118
Size

32KB
MD5

a5a62192112da5bc2573931d2a0d5650
SHA1

ebc472cc4d4cfc60db0573d65bbdc76ae7f725de
SHA256

3eec47ee97c150d46143c190098d027ae68db5a77d94db65f7eef549474367bc
SHA512

6a9e53881651d00ed589e8c1b405c06f0bfc4bc6859ab122c39efbaee32111334e05fcbf2e3dfc1d1d2542bb4a405c180f31d10e74b24ad3d23fb37b9ae3d0e3
SSDEEP

384:jZlb4YsBWfsIpFZth6YZi9O3tRTTHUa/6rfYsQnLbpqZl:rSWfsILvh6YZMGtRTTHmYsQU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a62192112da5bc2573931d2a0d5650_JaffaCakes118

Files

a5a62192112da5bc2573931d2a0d5650_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11d0575710a279b2afa519d294cd64aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
CloseHandle
GetVersionExA
CreateEventA
RtlUnwind
UnmapViewOfFile
GetSystemTime
DuplicateHandle
GetCurrentThreadId
GetLastError
GetTickCount
CreateMutexA
CreateFileA
GetLocalTime
WaitForMultipleObjects
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingA
FreeEnvironmentStringsA
IsBadCodePtr
GetStartupInfoA
IsDebuggerPresent
SetEvent
GetEnvironmentStrings
RaiseException
GetTempPathA
ResetEvent
GetModuleHandleA
ExitProcess
LocalFree
FormatMessageA
ReadFile
VirtualAlloc

user32

GetParent
SetWindowPos
CreateWindowExA
MessageBoxA
wsprintfA
GetWindow

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ