b896b440b0f142cbbe2cf2727d0a2e36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b896b440b0f142cbbe2cf2727d0a2e36_JaffaCakes118
Size

63KB
MD5

b896b440b0f142cbbe2cf2727d0a2e36
SHA1

68ca960dad80ecb4f3863c15dcb9db318c23ea68
SHA256

7df2312489c164666c41a557d65e246b2a971c2aee3b2c6a808a77aa5994274d
SHA512

dcef7bb0a07dda3f34dd416a7b6c9cf497573677cb37ccd342bf971e05b794f802da9aa7d2c76162a43dce2a6e72a1263b9d74115564801f89650c8a82110b3e
SSDEEP

768:kGPWnV1shj8wxktxMBJQ6FAPLotPE6GZgfdsr02bHLwhSJ8MTAT:k2WnV1cteteaot86GZmMZGSJTTAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b896b440b0f142cbbe2cf2727d0a2e36_JaffaCakes118

Files

b896b440b0f142cbbe2cf2727d0a2e36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f367fe3f65cbe113441541de3c8ba8ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
LoadLibraryA
GetCurrentThreadId
GetStartupInfoA
GetTempPathA
FindResourceA
LoadResource
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
lstrlenA
FreeResource
MoveFileA
DeleteFileA
GetSystemDirectoryA
GetCurrentDirectoryA
GetTickCount
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter

user32

OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
SetThreadDesktop
PostMessageA
FindWindowA
GetMessageA
PostThreadMessageA
GetInputState
CloseWindowStation
CloseDesktop
GetProcessWindowStation
wsprintfA

advapi32

CloseServiceHandle

shell32

ShellExecuteA

msvcrt

??1type_info@@UAE@XZ
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__CxxFrameHandler
??3@YAXPAX@Z

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ