dace29a46869358815d6974a3f55e0de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dace29a46869358815d6974a3f55e0de_JaffaCakes118
Size

43KB
MD5

dace29a46869358815d6974a3f55e0de
SHA1

9278f98bb1c66edcd40ef7bf3e2870b3535b82ce
SHA256

02b9b543ac46cdaeace52599755c90c39d7dbb06466d857927387b6d9a01098f
SHA512

0529909d2e1a91ac12f2123797a2bad312c753dc73a6076dee927d8bfb67daa07f53549b1d968845787be579a8ac7d3b13ef555d757808b0bf1e5c08844fa2ab
SSDEEP

768:hKWxK51Tcgje5KBmxotuXvBa2clZKhJl9hNo3xDgGyaK60L353vgJPUPYYYtze93:Px61TcgS5KBlCcOJv8qwKgeAnta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dace29a46869358815d6974a3f55e0de_JaffaCakes118

Files

dace29a46869358815d6974a3f55e0de_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4cbba15327bc263d466aeb5c55b53644

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileW
OpenProcess
CloseHandle
GetCommandLineA
GetUserDefaultUILanguage
HeapFree
FlushFileBuffers
ExpandEnvironmentStringsW
GlobalLock
GetTempPathW
HeapAlloc
EnterCriticalSection
GetSystemTime
FindFirstFileW
GetModuleFileNameA
MoveFileExW
lstrcatW
lstrlenA
SetFileAttributesW
FindClose
GetCurrentThread
SetEndOfFile
lstrcpynW
UnmapViewOfFile
GetTimeZoneInformation
CreateEventW
SetFileTime
GetDriveTypeW
GetModuleHandleA
CreateThread
SetEvent

user32

CloseWindowStation
SetThreadDesktop
GetForegroundWindow

Sections

.dsd
Size: 35KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kbwvqj
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tgzyv
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ