d2c6f877e3e1411113faacf40be32c05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2c6f877e3e1411113faacf40be32c05_JaffaCakes118
Size

90KB
MD5

d2c6f877e3e1411113faacf40be32c05
SHA1

498a7c69b9066357661dc33478679d101c1c4c39
SHA256

e66170589cbb8362cd9030671189e3d1b3739fc34f4312e8849624a2f4e7b027
SHA512

a01234aaa1f90af2c8c24e5113e955c94585776165a1f5659f406324014ece47ea820882e8e2390c3f3bb534f65844da9ff93df0b6b3945e5d796cd7cfda64c6
SSDEEP

1536:PcpQzPUlAa8uR+LUkprrqbIlkjNmVBzW6+TSO8ebdtjWqnZvfP:JT8RCxS+kjkVMRp8eby4v3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2c6f877e3e1411113faacf40be32c05_JaffaCakes118

Files

d2c6f877e3e1411113faacf40be32c05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40b5c61c5618fab52ff3159172bf67c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DestroyCaret
CreateMDIWindowA
CreateDialogIndirectParamA
CreateCursor
CreateAcceleratorTableA
CopyImage

kernel32

GetPrivateProfileStringA
lstrlenA
lstrcpyA
lstrcmpiA
WriteFile
VirtualFree
UnmapViewOfFile
TlsAlloc
CloseHandle
EnumResourceNamesA
ExitProcess
FlushFileBuffers
GetCommandLineA
GetLocalTime
GetStartupInfoA
GetTimeFormatA
GetVersion
InitializeCriticalSection
SetLastError

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE