c92d63aadde6bc5b0010fa00ba3a3a0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c92d63aadde6bc5b0010fa00ba3a3a0a_JaffaCakes118
Size

51KB
MD5

c92d63aadde6bc5b0010fa00ba3a3a0a
SHA1

e8f7444f2d2ac9872754faeef5f30ac7f75c3a13
SHA256

dd42ecd23110324a5aa54214fddff036e675498c2dcb26d1271d9bfd99b4e25f
SHA512

d1419ec8f2ad0624372203983ed467aa92111b25d4eb6489e9e455f8eeac20d5f87e9222106da793b041115226c92ab16f137a7d960dcfb12d963f485a684885
SSDEEP

768:JT6VUcldVYYPBVHRnPVhCCVpTrxhcSk2rMC20rgNUOeEauxWjH+R/fTX4/Ov:JT6fLPbHpbT3o2rgNi3hjHFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92d63aadde6bc5b0010fa00ba3a3a0a_JaffaCakes118

Files

c92d63aadde6bc5b0010fa00ba3a3a0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

031b1f6565304d49e0e408fb8a384149

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ToAscii
MessageBeep
IsCharUpperA
GetDC
DestroyMenu
DestroyCursor
CreateCursor

kernel32

LoadLibraryA
lstrcpyA
lstrcmpiA
lstrcatA
TlsFree
TlsAlloc
SleepEx
Sleep
CloseHandle
EnumResourceLanguagesA
FindResourceA
GetDateFormatA
GetLastError
GetLocalTime
GetPrivateProfileStringA
GetTimeFormatA
GetVersion
InitializeCriticalSection
LeaveCriticalSection
RtlUnwind
LocalAlloc
OpenFile

oleaut32

OleIconToCursor
OleTranslateColor
SafeArrayAccessData
SafeArrayAllocData
SafeArrayAllocDescriptor
SysFreeString
SysReAllocString

Sections

.text
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ