ac7c12d6ec401f674b765fd836e1976e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac7c12d6ec401f674b765fd836e1976e_JaffaCakes118
Size

293KB
MD5

ac7c12d6ec401f674b765fd836e1976e
SHA1

0d856ce9876d2dd1be112137a61b875a7ddbe776
SHA256

96a78ff8f4d9623c41e9b0de258f5202e189810aa66742ce6ff1ae53ed2c47f6
SHA512

5ba45c2c1651ed55b07072fee404a912fe13fb48a2faa55971a37d8f72fa6d6a9f57dc0d65f1305b85bd662f6307da36f90b0119083a9b76e8178bb1942cce6e
SSDEEP

6144:A8z96U/bdebud3CsZFmnxtrCNa6iu7CUDIcVthENTNw:A8z9N8uRFgtWNaYDIIEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac7c12d6ec401f674b765fd836e1976e_JaffaCakes118

Files

ac7c12d6ec401f674b765fd836e1976e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c766f9415bef34748946dec310c46f87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
FindFirstFileA
GetCommandLineA
GetTickCount
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
ResumeThread
SetEvent
SetLastError
Sleep
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

GetFocus
GetMenuItemInfoW
OffsetRect
PtInRect
SendMessageTimeoutW
SendNotifyMessageW
GetDlgCtrlID

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 279KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ