dcd3ac1a54793818ec026daf484bed29_JaffaCakes118 | Triage

Sharing

General

Target

dcd3ac1a54793818ec026daf484bed29_JaffaCakes118
Size

871KB
MD5

dcd3ac1a54793818ec026daf484bed29
SHA1

df28f0d213795fbd5b072709277771eaf41ef389
SHA256

e7fdea2562821720c389059b96a5ac19e7ecd30f7d4c65ac400fb3d273edae06
SHA512

afb80c29a080e9d645ad27a233b5664994e13c06b5d4361691feaa4f1fea54726374fbef22f6629d109105295e904850a3b7d4075b35c49f44e83a10b58b8894
SSDEEP

12288:DUESSHLmZ3StMutsEHPtKQOzQRcdnuuQArUk4RViZwstUKrG609vaHB2W/TV7:bPHiZi7tzHPtK5zvJvQPk4RudS7923

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcd3ac1a54793818ec026daf484bed29_JaffaCakes118

Files

dcd3ac1a54793818ec026daf484bed29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a0f43cc10617bdd9713f1086f14d977

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
TlsGetValue
GetDriveTypeA
PulseEvent
TlsAlloc
GetModuleFileNameA
CreateFileA
CancelIo
DeleteFileA
GetStartupInfoA
GetModuleHandleA
lstrlenA
HeapCreate
IsBadStringPtrA
CreateFileMappingA
DeviceIoControl
ReleaseMutex
SuspendThread
GetACP
ResumeThread

user32

IsWindow
DispatchMessageA
FindWindowW
DispatchMessageA
CallWindowProcW
DestroyWindow
LoadImageA
DrawTextW
GetWindowLongA
GetIconInfo
DestroyMenu
PeekMessageA
IsZoomed

amstream

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

cryptui

LocalEnroll

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ