f045a56d6d75b140b9dff512c90f00fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f045a56d6d75b140b9dff512c90f00fe_JaffaCakes118
Size

336KB
MD5

f045a56d6d75b140b9dff512c90f00fe
SHA1

7b7fb37946a95974fa2b26f60af887efda7c3689
SHA256

1d408b44ae96c752394c4a6e116511e71b73017044f960e6601feb46fb0e9c0d
SHA512

0ab12f721ba52630d3b540d9d60816755683a698cb6b69c40fb3db3ac77cab5ed75cebb293311632fc99cc6c732b5a6eae7d87f2edf8c35816c2f68ed5f0b680
SSDEEP

6144:9CS6PIst8egjwcXA8MBqR7N5Ofz9pr1jIu8d9lqYRrt/JNTDTUQ7U9XvQICU:CoAfqRXYRLAdDfrFPTDTPgh4VU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f045a56d6d75b140b9dff512c90f00fe_JaffaCakes118

Files

f045a56d6d75b140b9dff512c90f00fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd4e3c15a66538c6a71b493c8cad11d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
HeapUnlock
GetLastError
GetModuleHandleA
WaitForMultipleObjects
GetCurrentThreadId
GetEnvironmentStrings
HeapCreate
GetProcAddress

user32

LoadBitmapA
GetSysColorBrush

netapi32

NetDfsManagerInitialize

psapi

GetWsChanges

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE