0366295e43e0842e2a606b01f160087d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0366295e43e0842e2a606b01f160087d_JaffaCakes118
Size

499KB
MD5

0366295e43e0842e2a606b01f160087d
SHA1

b13eb6a42bb9288cf82ebe97309b891b05685f73
SHA256

2770c3553c7f31182f371fa1ea00d8d22569018858f4c701e591001fd512fff8
SHA512

f816ec1c5053d312daa492039fe9c7cf3150fc8291defbb045f24b622b93c356634c1fe3938b29234bd25d2ff3f8fe269261be81cefa2ccb09fab23534acf8db
SSDEEP

6144:YDhvkZ8gulzV2V9/H5DTwaHd6dcNiXPnpUTJPyd+MElqwkp7:YlMZu2z96dcYXPnpcJPydjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0366295e43e0842e2a606b01f160087d_JaffaCakes118

Files

0366295e43e0842e2a606b01f160087d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

beb9ee4934f14bfb66c40f90a0dc528b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
ReleaseMutex
GetModuleHandleA
CreateFileA
IsBadStringPtrA
GetModuleFileNameA
GetDriveTypeA
TlsGetValue
SuspendThread
HeapCreate
lstrlenA
ResumeThread
PulseEvent
IsDebuggerPresent
DeviceIoControl
CreateFileMappingA
GetStartupInfoA
GetACP
TlsAlloc
DeleteFileA

user32

DestroyMenu
DrawTextW
CallWindowProcW
FindWindowW
IsWindow
PeekMessageA
DispatchMessageA
GetIconInfo
DestroyWindow
GetWindowLongA
IsZoomed
LoadImageA
DispatchMessageA

amstream

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

cryptui

LocalEnroll

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 491KB - Virtual size: 490KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ