b7240d6cc38adac1c6a9d13a966efe36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7240d6cc38adac1c6a9d13a966efe36_JaffaCakes118
Size

452KB
MD5

b7240d6cc38adac1c6a9d13a966efe36
SHA1

a8e9911ead160a5ecdca2c9f645cb17675ca8d2d
SHA256

6fab972678417c10dcc741781d7d7bb8d78d8287d77c2141cacc24a4009e37cc
SHA512

6f35f489edc337a98ccbf07738fdd1fbb8a252951c57d956c1fba39c8a76b3b9b39b26d8a404efead2d2895f1ca9f7f828880ae6d1d489e240c77a954f473a02
SSDEEP

6144:HDF6wfO77wOrZHTyfzkaYETsMQJtnN71kz5d0FQFNkBrChemwaju:Xf0RmfzBYADmNZA56CFNkBrChu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7240d6cc38adac1c6a9d13a966efe36_JaffaCakes118

Files

b7240d6cc38adac1c6a9d13a966efe36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b5276a0150d4cf7dc5efdc2686c3193

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
ExitProcess
TlsSetValue
GetSystemDirectoryA
CreateSemaphoreA
VirtualQuery
EnterCriticalSection
VirtualFreeEx
GetModuleFileNameA
GetLastError
GetModuleHandleA
GetProcAddress
TlsGetValue
GetCurrentThread
GetSystemTime
IsBadWritePtr

user32

UpdateWindow
IsWindowVisible
GetDesktopWindow
LoadIconA
InSendMessage
LoadCursorA
LoadBitmapA
GetWindowInfo
LoadAcceleratorsA

gdi32

GetPixel

advapi32

AddAce
CopySid

shell32

DuplicateIcon

ole32

CoUninitialize

psapi

GetProcessMemoryInfo

avifil32

AVIStreamCreate

msvfw32

DrawDibEnd

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 781KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ