ba3aed36ebbc249af503c3fd813ccd9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba3aed36ebbc249af503c3fd813ccd9c_JaffaCakes118
Size

499KB
MD5

ba3aed36ebbc249af503c3fd813ccd9c
SHA1

460b6f6378dc6bca4c1edeffb8b509c95c1f7b84
SHA256

d900d05e3a58914ecaf29be84f1347eb96168cfc3a00a7ea6b7848911ed995c6
SHA512

a27abfb8bbb53bb239d5960743c0aa6e20fbaa479acccc5f2193963753ff43f0c8f027b427477ad5ec75cac109b1fc7115ee6a7cbb7a339692a935668758a9bb
SSDEEP

6144:gxAhvkZ8gulzV2V9/H5DTwaHd6dcNiXPnpUTJPyd+MElqwkp7:gEMZu2z96dcYXPnpcJPydjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba3aed36ebbc249af503c3fd813ccd9c_JaffaCakes118

Files

ba3aed36ebbc249af503c3fd813ccd9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b93445b35f32164aa185255a3a18c65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
IsDebuggerPresent
GetFileAttributesA
lstrlenA
SuspendThread
CreateFileMappingA
ReleaseMutex
GetACP
PulseEvent
Sleep
GetModuleFileNameW
GetStartupInfoA
HeapCreate
IsBadStringPtrA
GetModuleHandleA
TlsAlloc
TlsGetValue
CreateFileA
GetDriveTypeA
DeviceIoControl

user32

FindWindowW
IsZoomed
DispatchMessageA
GetIconInfo
PeekMessageA
IsWindow
CallWindowProcW
DrawTextW
LoadImageA
GetWindowLongA
DestroyWindow
DestroyMenu
DispatchMessageA

asycfilt

FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance

cryptui

WizardFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 491KB - Virtual size: 490KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ