cedbe813748f88f7ecd691537d36e4e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cedbe813748f88f7ecd691537d36e4e4_JaffaCakes118
Size

201KB
MD5

cedbe813748f88f7ecd691537d36e4e4
SHA1

b5d0377a06d020021b11aab928f09cad87703e5d
SHA256

43b55235b4e1d39a8574b749c7d4d9f36639016c3054a5c8d140482988fa95cf
SHA512

21b484fffcfd83c2a91ec32252a84e7d246839148355468d4e0b4eb75ec0af65852c70cc813b93ef0d7085a41506df565e3b8a582f3843521cae5d8cb1fd42f0
SSDEEP

3072:JIAZ76s9cZQwTUu8ryOlrKUOduqCFkKT600Iq5ztAGvOG+CsXlD:Zzfu/s9n60SA9G+CE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cedbe813748f88f7ecd691537d36e4e4_JaffaCakes118

Files

cedbe813748f88f7ecd691537d36e4e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4b4f8c9dac1d143db1de4d7b2f7d5ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
CharNextA
GetDC
GetDesktopWindow

kernel32

RemoveDirectoryA
GetCurrentProcess
GetWindowsDirectoryA
lstrcmpA
GlobalFindAtomW
lstrcmpiW
LoadLibraryW
lstrcmpiA
GetCommandLineW
GetCommandLineA
DeleteFileA
GetProcessHeap
GlobalFindAtomA
GetModuleHandleW
lstrlenA
GetConsoleOutputCP
QueryPerformanceCounter
GetThreadLocale
Sleep
CopyFileA
SetCurrentDirectoryA
IsDebuggerPresent
GetACP
GetDriveTypeA
GetModuleHandleA
GetCurrentProcessId
GetStartupInfoA
GetLastError
SetLastError
lstrlenW
GetCurrentThreadId
MulDiv
GetOEMCP
GetVersion
DeleteFileW
GetCurrentThread
GetTickCount
VirtualAlloc
GetUserDefaultLangID

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ