dd9242dc895831a84c26d00d21e8a139_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd9242dc895831a84c26d00d21e8a139_JaffaCakes118
Size

11KB
MD5

dd9242dc895831a84c26d00d21e8a139
SHA1

d774d02df879278f686bff39daed8f08f6533f42
SHA256

1b07bcaae5eafc07aa8ee99125622a3227c2878eeb94b4c95689fbddb90eb0fe
SHA512

d3fcae439f228b3db52c3a90f75875914b47b4da2bf61295f2b8c06f1fcde7cac0d426a3b98078e08fd986b2772f9cf46f8711c491b8de371538acc655d4b2fe
SSDEEP

192:qPWh0ajE8qJEEJ4LeuQtGfFKdKPEPEng6aTYq/:qKo8qJEC4GsFKaasi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd9242dc895831a84c26d00d21e8a139_JaffaCakes118

Files

dd9242dc895831a84c26d00d21e8a139_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adcc1d212faa7c93f80ac5b109865248

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
DeleteTimerQueue
GetModuleHandleA
ReleaseMutex
ReleaseSemaphore
GetCurrentProcessId
ResumeThread
lstrcpyA
lstrcatA
CompareStringA
WideCharToMultiByte
CloseHandle
GetCommandLineA
ExitProcess
CreateEventA
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
RtlUnwind

user32

GetGuiResources

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE