db682932ae85cd6780638417c0fa7097_JaffaCakes118 | Triage

Sharing

General

Target

db682932ae85cd6780638417c0fa7097_JaffaCakes118
Size

3.1MB
MD5

db682932ae85cd6780638417c0fa7097
SHA1

9b53d9d031d62b2baf1efbeaad5fa55981efa61a
SHA256

b72a49792921ab8207f9bf9cc6af6637a9101f269ccab30200acac1bc4c278fa
SHA512

d8aad0b75699ac14c7f668fe8a04d46eee34cad080d09f67b64c60759eb00b4aba64b64c3dc80da067211fd8a998b567120c79566a67226f37f744178a11daf8
SSDEEP

24576:wPxUD2VgwneGYkj8gxs2zv9WpUOGRFRUje/yM2FdYEpS2kbHdksC5CHnOOvrtl/7:wPxUD4IkjHsukje/yMm1pS2kSsK4r2z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db682932ae85cd6780638417c0fa7097_JaffaCakes118

Files

db682932ae85cd6780638417c0fa7097_JaffaCakes118
.exe windows:3 windows x86 arch:x86

d238279928904cf4bac92df1bcf97bf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CreateFileA
DisableThreadLibraryCalls
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetTickCount
MultiByteToWideChar
QueryPerformanceCounter

user32

DispatchMessageA
EndDialog
GetKeyboardType
GetPropA
InvalidateRect
IsChild
MessageBoxA
SetCursor
SetFocus
ShowWindow
TranslateMessage

Sections

.CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.BSS
Size: - Virtual size: 21.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ