d48e89d3a1b1ae68ba9aff405983ee3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d48e89d3a1b1ae68ba9aff405983ee3b_JaffaCakes118
Size

137KB
MD5

d48e89d3a1b1ae68ba9aff405983ee3b
SHA1

4e4fe3b70e5ad95877acacbf0fa499e5f4e8c14f
SHA256

bd0ca26d3a6c5001d8960bc53259d3390a146bd648332510ef561e0533160ec6
SHA512

9e857da57092da2474b5df80d492111e25cc8b293c7e71a36a00db599b5e60bc280c71129f70b28d51653d7f92883568aaa69c3dd51a4bb110d9c822ae729186
SSDEEP

1536:f1UOgFvEuzmmjtTjjn4r1BiYcjKsrtoVS+E8PZygQ/hgF0T5JnUiO:fmhxEuachjsr1itoml/huuU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d48e89d3a1b1ae68ba9aff405983ee3b_JaffaCakes118

Files

d48e89d3a1b1ae68ba9aff405983ee3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23246f2da6cf648f65b244a8e900f70c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetDiskFreeSpaceA
FindClose
VirtualProtect
SetEvent
CreateThread
FindAtomA
GetCalendarInfoA
DeleteCriticalSection
SearchPathA
ExitProcess
GetLastError
FindVolumeClose
GetTickCount
FindResourceExA
Sleep
CloseHandle
TlsGetValue
ReleaseMutex
lstrlenA

user32

GetKeyState
CreateMenu
GetMessageA
CopyImage
EnableWindow
IsIconic
CloseWindow
CreateWindowExA
DispatchMessageA
GetScrollBarInfo
DialogBoxParamA
DragDetect
EndDialog
GetUpdateRect

msdmo

DMOEnum
DMORegister
DMOGetName
DMOUnregister
DMOGetTypes

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ