db13266d564e638250e9bec8910fedf6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db13266d564e638250e9bec8910fedf6_JaffaCakes118
Size

156KB
MD5

db13266d564e638250e9bec8910fedf6
SHA1

78bc5c6b339863dc5b662215a7d785fcce00566b
SHA256

395a569af7ff8fd49926919b94240053776a837c024e03ad4a59578ee4ff2b07
SHA512

d1f679639ca4037d16d8543065917f0e4ca448f293a12c12649b15bd67556d69ed4e3afbc9d95e67f138e38e0830d3f89cfce5af13661ff2f7aad63f1ae3264d
SSDEEP

3072:lgqJKkXCADiY7NNKG4JB05qJksNuO1IRJN3ZgqBlMcM7wyf:iq1lRNxR8gN3l1Gf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db13266d564e638250e9bec8910fedf6_JaffaCakes118

Files

db13266d564e638250e9bec8910fedf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6d095b29893c1e0a3a12e022087d5b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

SetCapture
GetWindowInfo
ReleaseCapture
ExcludeUpdateRgn
ValidateRect
InvalidateRgn
ValidateRgn
GetCapture
GetUpdateRgn

kernel32

GetVDMCurrentDirectories
SetEnvironmentVariableW
LoadResource
GetLocalTime
CompareStringA
FindResourceW
SetThreadPriorityBoost
FileTimeToLocalFileTime
FreeLibrary
FileTimeToSystemTime
LocalFileTimeToFileTime
EnumResourceNamesW
SetErrorMode
SetCurrentDirectoryW
GetShortPathNameW
HeapCreate
SystemTimeToFileTime
RegisterWaitForSingleObject
FindNextFileW
FindFirstFileW
FindClose
GetStringTypeW
SearchPathW

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ