abd11d317cbaaa1faa0a0b4b72fbfff1_JaffaCakes118 | Triage

Sharing

General

Target

abd11d317cbaaa1faa0a0b4b72fbfff1_JaffaCakes118
Size

870KB
MD5

abd11d317cbaaa1faa0a0b4b72fbfff1
SHA1

15ece85d3ed6d6b24050c7ef5237f62ba90a71c6
SHA256

0afbd431f77538b5043f435f784e69b63af3a0f1ca58259df3513f36fb36f8d4
SHA512

15b7094988b7f9b23c3f33c6aecb19e40ad6f646d70f2625e3e07d95f5cd223ab1c9a5cd047473cd5f96c94efde7cfb3a435aaf039c475b9249d5c491db2f2a5
SSDEEP

12288:SfXN0xKPnN3ktnNx/XeyC04uawf1ZcZnfqhy5xzgRVKcettr+a6yGyMo+d0oK:S+MlmNxveyNRTfinf+y37ttr+Ron

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abd11d317cbaaa1faa0a0b4b72fbfff1_JaffaCakes118

Files

abd11d317cbaaa1faa0a0b4b72fbfff1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccd5785e77c2a7375eef5c61c5592423

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
Sleep
GetACP
GetDriveTypeA
DeviceIoControl
SuspendThread
ReleaseMutex
IsBadStringPtrA
HeapCreate
GetModuleFileNameW
TlsAlloc
GetFileAttributesA
GetStartupInfoA
lstrlenA
TlsGetValue
IsDebuggerPresent
CreateFileA
PulseEvent
DeleteFileA
GetModuleHandleA

user32

PeekMessageA
DispatchMessageA
CallWindowProcW
GetIconInfo
DispatchMessageA
IsWindow
FindWindowW
IsZoomed
GetWindowLongA
LoadImageA
DrawTextW
DestroyWindow
DestroyMenu

asycfilt

FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance

cryptui

WizardFree

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ