0534fb0b9acf9aeecc1e2c3001993b94_JaffaCakes118 | Triage

Sharing

General

Target

0534fb0b9acf9aeecc1e2c3001993b94_JaffaCakes118
Size

124KB
MD5

0534fb0b9acf9aeecc1e2c3001993b94
SHA1

3d42d21133eafe16b6bffb8c1a210058c85e08be
SHA256

cfb8e9c0de7dfcf72acdba77e21ffe028ce594b7d250dcd1bed173def956ac74
SHA512

cc03240000823063604cca3beaa5d2089ead58b9d70a93b8eea2fe436fb75384c4d08ad2916fd50cafaf16b5a536ff90fd6e9b6f59b1b87ced1e438a88211b2e
SSDEEP

3072:oiL0Dic3w5zo/RwAKaG1bgGVjDvXHMYbf0:prc34oJZKNrVjDvXN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0534fb0b9acf9aeecc1e2c3001993b94_JaffaCakes118

Files

0534fb0b9acf9aeecc1e2c3001993b94_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3a6fa06008ba6a39fb1a4991b7ecc63d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
LoadLibraryA
GetEnvironmentStringsW
CreateFileA
OpenMutexA
SetLastError
GetCommandLineA
Sleep
OpenMutexA
WriteConsoleW
SetLastError
DeleteFileA
GlobalFree
VirtualProtect
ReadFile
EnterCriticalSection
lstrlenA
TlsGetValue
CreateDirectoryW
CloseHandle
GetTickCount
GetFileSize
GetModuleFileNameA
GetStartupInfoA
RemoveDirectoryA

user32

IsZoomed
GetClassInfoA
IsWindow
IsWindowVisible
GetWindowLongA
MessageBoxA
CreateIcon
DestroyMenu
wsprintfA
GetSysColor
GetWindowLongA
DispatchMessageA
PeekMessageA

cmutil

??_FCIniA@@QAEXXZ
??1CIniA@@QAE@XZ
??_FCIniW@@QAEXXZ
??1CIniW@@QAE@XZ

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE