cea016acbf5159a97628fcd36ae971b3_JaffaCakes118 | Triage

Sharing

General

Target

cea016acbf5159a97628fcd36ae971b3_JaffaCakes118
Size

391KB
MD5

cea016acbf5159a97628fcd36ae971b3
SHA1

6d5d1348f598faba622664dd78539d014557fba9
SHA256

ef59ae781e9dfa4074ed714c131d0c4b166c6d5390872069c1b3983a1d67daa3
SHA512

e1364fd129123440fc77a19d7487c054fc5fce93d583c6fef639e4b3152cbc3ba9a29c6c398b6b6c256ab53f4fc1c732f2b51e249903db29f22e22b9450319f7
SSDEEP

12288:jVSRMIHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:wRMIkAJLjpFvN/ytkjEOfoMWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cea016acbf5159a97628fcd36ae971b3_JaffaCakes118

Files

cea016acbf5159a97628fcd36ae971b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cf8a37bb8fbe5000f734df40f45369a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
FindAtomA
GetFileTime
LocalFree
GetCurrentProcessId
CreateEventW
ReleaseMutex
GetPrivateProfileStringA
GetEnvironmentVariableW
HeapCreate
LoadLibraryW
GlobalFlags
FindClose
IsBadStringPtrW
GetDriveTypeA
InitializeCriticalSection
lstrlenW
WriteFile
TlsGetValue
ReleaseMutex

user32

IsWindow
DrawStateW
EndDialog
CreateWindowExA
GetClientRect
DrawTextA
SetFocus
GetSysColor
GetSysColor
CallWindowProcW
GetKeyboardType
DispatchMessageA
GetClassInfoA

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 381KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ