0350516761719623dd2c2a97201f528e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0350516761719623dd2c2a97201f528e_JaffaCakes118
Size

226KB
MD5

0350516761719623dd2c2a97201f528e
SHA1

40a8536b14b93a72497b6a3d5d3e6a46ced3bee4
SHA256

e7796078e8e55b23e4605074fd522c457c00a89cd95faffa862ac665f663c126
SHA512

c1f5dac0c178af23ee0a3a90308d7e3c29876e322519f84313f1c2d0b3f0f431c6c34e8ac71e37b0bf12321e7d33940ddcd268a9475d5a261d94cded2b5bd07d
SSDEEP

6144:xrXifUsxnVs3zjKFYUKGYyrBKcHnjYfIHTn1rrQzWmtXht:xrXifZ6GMWTHnnzn1rrQ5tH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0350516761719623dd2c2a97201f528e_JaffaCakes118

Files

0350516761719623dd2c2a97201f528e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8a9d3f12191c02e76f626e5b7f8ce6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
GetMailslotInfo
GetEnvironmentVariableA
InterlockedExchange
LocalSize
FreeConsole
GetACP
LocalFree
ResumeThread
CloseHandle
GetModuleHandleW
GlobalFree
lstrlenA
WriteFile
GetExitCodeProcess
CreateThread
FindVolumeClose
GetDriveTypeW
GetPrivateProfileIntW
VirtualAlloc

user32

GetCursorInfo
SetFocus
DispatchMessageA
CallWindowProcW
DrawStateW
EndDialog
GetSysColor
IsWindow
GetKeyboardType
GetClassInfoA
GetSysColor
GetClientRect
CreateWindowExA

mstime

DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllGetClassObject

hdwwiz.cpl

InstallNewDevice

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ