0554f0aaef52c266c0a48a44c0536100_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0554f0aaef52c266c0a48a44c0536100_JaffaCakes118
Size

68KB
MD5

0554f0aaef52c266c0a48a44c0536100
SHA1

271eb599d9e9f6f5a740d9bd480a8f319badf1a0
SHA256

d616feae2f872809fa561a639517dc4f8256028d25ad0eb7a0203d96ef413f38
SHA512

e1aa4794b7a2d1c4d2d00e02e700c395c0acf2a43a390e9e3ddc3e09f70abc299209f92d097d1c0e9a8b4489f957e4d2b7ddaf7ef9de68352ef216b2a6b4648d
SSDEEP

768:hAygo5ebZ7ok3FZ9ypL0vzJDsOq2YAp7CP:R19k7QwrJgOqHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0554f0aaef52c266c0a48a44c0536100_JaffaCakes118

Files

0554f0aaef52c266c0a48a44c0536100_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2841f45bf71d1c069b9a0f11b63eb04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
CreateMutexA
WriteProcessMemory
GetCurrentProcess
GetTimeFormatA
CreateSemaphoreW
LoadLibraryA
SleepEx
CreateDirectoryA
GetTickCount
WriteFile
FoldStringW
GetNumberFormatA
CompareStringA
HeapCreate

ctl3d32

Ctl3dEnabled
Ctl3dCtlColor
Ctl3dGetVer
Ctl3dUnregister
Ctl3dRegister

user32

CreateWindowExW
IsZoomed
SetCursorPos
DialogBoxParamW
GetMessageA
PostMessageA
GetCaretPos
PeekMessageA
ShowWindow
GetWindowTextA
GetWindowLongA
IsWindow
ShowWindow
CharToOemA

themeui

DllCanUnloadNow
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ