b000a65319823cfa62e759cbdb344207_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b000a65319823cfa62e759cbdb344207_JaffaCakes118
Size

165KB
MD5

b000a65319823cfa62e759cbdb344207
SHA1

e2be4b2f30b69d8bc43f47fc033fb165084b8770
SHA256

c0542f573b215aa3b325f0fa6fd4a6b8b2940652c8681d00d625423585f671d5
SHA512

f68f51078f681cd3134bdae21d4a4ec1e63b30ed41f5908bf0dca806152bd04793abb092803927bd3869253644f415f2347814ba0cb0554c6d57ee0615fc2d21
SSDEEP

3072:uJkpR9S6d6wvAq17FTTt0oZ2dsn0IgKq+IdJld7BtKo:4kpRJ6+ZMSgjjO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b000a65319823cfa62e759cbdb344207_JaffaCakes118

Files

b000a65319823cfa62e759cbdb344207_JaffaCakes118
.exe windows:5 windows x86 arch:x86

284f0460785cad6dd2cd6c8a3b378a37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CurrentData\Modify\ApplicationNew

Imports

user32

DestroyMenu

kernel32

GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA

Exports

Exports

?CloseWindowStationCloseWi

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vars4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vptr4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ