b90837f2ad1bd61aa6a39dc0f98d1869_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b90837f2ad1bd61aa6a39dc0f98d1869_JaffaCakes118
Size

365KB
MD5

b90837f2ad1bd61aa6a39dc0f98d1869
SHA1

ce6c00cf6eb8eb90229f47d48151aa426a5f6d29
SHA256

d1a520166c4e70a161b81c5a6aed35f9a3d25170b438177a3d2a63276a231bb9
SHA512

a7b5a2b97f7c1ed0db825314127ff9c06ac80232469ff63bd741713bfdfaf7ef8d5a2fdaa5238ce431750bb236942bffc29f93280003918b0d8a437cc6165e6b
SSDEEP

6144:rZKNWOXPOumOhnHDAiUNfNAxOZ/kxjXrpRaPz6PcSTGtNFEQuZxJC:r4hhxDrUYxOZ/kxj7pRizAcCGPFEQAI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b90837f2ad1bd61aa6a39dc0f98d1869_JaffaCakes118

Files

b90837f2ad1bd61aa6a39dc0f98d1869_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc0247afb5b387b3e8c6f2d22953146a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetComputerNameA
Sleep
SetLastError
GetDiskFreeSpaceExW
FreeConsole
EnumResourceTypesA
GetCommandLineA
CloseHandle
FindClose
TlsGetValue
CreateMutexA
GetDriveTypeA
GetExitCodeProcess
VirtualProtect
ReleaseMutex
LoadLibraryExA
GetLastError
GetTickCount
DeleteCriticalSection

shell32

SHGetSettings
SHGetNewLinkInfo
SHGetDiskFreeSpaceA
SHFree
ShellAboutA
SheChangeDirA
ShellMessageBoxA
DragAcceptFiles
SHGetMalloc
StrChrA
DragFinish
DragQueryFileA
DllUnregisterServer

msports

ComDBReleasePort
PortsClassInstaller
ComDBClose
ComDBClaimPort
ComDBOpen

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ