d4eaf362ccb0ad20f8de6f3abb9509cb_JaffaCakes118 | Triage

Sharing

General

Target

d4eaf362ccb0ad20f8de6f3abb9509cb_JaffaCakes118
Size

373KB
MD5

d4eaf362ccb0ad20f8de6f3abb9509cb
SHA1

1e3ecb519447a90f978453cb43fd15db500e4a74
SHA256

7011ad9e7d2ccb9f1902084e56cb5e7afad4d2540a319af74911dcf23383658c
SHA512

66df86257afe3a74557ca3651365513309112c4b46f8d28ad9b2f20a8f717d1873f4aa0250955dcf81a6605ad2e9ec0e7eb323be212d64f5035973c507e0b0b8
SSDEEP

6144:Ggj3DaCsi6JNpz40t1tcPezTYL9MyAoA5krBzgq1Bzl1JBsb:GgnagENp3tcPenE9XY5Qnz1m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4eaf362ccb0ad20f8de6f3abb9509cb_JaffaCakes118

Files

d4eaf362ccb0ad20f8de6f3abb9509cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afe7a230834678dfb7a473c4522cada2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetDriveTypeA
DeviceIoControl
GetModuleFileNameW
TlsAlloc
ResumeThread
GetStartupInfoA
TlsGetValue
IsBadStringPtrA
GetFileAttributesA
CreateFileA
PulseEvent
SuspendThread
lstrlenA
ReleaseMutex
HeapCreate
GetModuleHandleA
IsDebuggerPresent
CreateFileMappingA
GetACP

user32

DestroyMenu
DrawTextW
GetIconInfo
DestroyWindow
PeekMessageA
DispatchMessageA
DispatchMessageA
CallWindowProcW
FindWindowW
IsWindow
IsZoomed
GetWindowLongA
LoadImageA

amstream

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

cryptui

WizardFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ