b6fc45e57f52cf4145c61c5ee6e5ff68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6fc45e57f52cf4145c61c5ee6e5ff68_JaffaCakes118
Size

360KB
MD5

b6fc45e57f52cf4145c61c5ee6e5ff68
SHA1

af91e0e79d58a63c89e229d602739004f8ec439e
SHA256

6fff035b68b8cece1721951f1af685609db5642304ae5a91da8ab12f0a1979f3
SHA512

3c1a1e7dff71fef0a9eb183e7bee960dcbc7449d03806e4738fe0e3187d999f2d636236a39e574a9a5bcab25f9f91e2038fe3c8c41d1cb9815f7d90f55a8dde5
SSDEEP

6144:RrbtkdcnoBu/PumD8G5Xcf4OdnOwfyY7Q84O+uibRKpU1D7pwSeAd183yJF:fkdcnACuxdRywQ84sibRKpUBFwPAd63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6fc45e57f52cf4145c61c5ee6e5ff68_JaffaCakes118

Files

b6fc45e57f52cf4145c61c5ee6e5ff68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2af979d6a1625f953490fa44aa6c00c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
HeapCompact
ExitProcess
FindNextFileA
GetProcessHeap
SetEvent
VirtualAlloc
GetSystemTime
OpenMutexA
HeapReAlloc
SetFileApisToANSI
VirtualProtect
GetModuleFileNameA
GetProcAddress
SuspendThread
GetCurrentProcess
GetSystemDirectoryA
HeapFree

user32

GetTopWindow
GetWindow
IsChild
FindWindowA
IsWindowUnicode
LoadIconA

advapi32

CopySid
AddAce

ole32

CoUninitialize

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ