0cabe91324acf8fe329182a99028755b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cabe91324acf8fe329182a99028755b_JaffaCakes118
Size

385KB
MD5

0cabe91324acf8fe329182a99028755b
SHA1

1c2356d38b09bdb758ff2607ea647936cd299db1
SHA256

b0589e29b0cbdf420cdcef87408f2d78a8ec392f197f2e0e8f4553d233234478
SHA512

5710e09279d5399153f67e6c3fbc53664b95a19921527c6b375ef5adae66fc837479060efab1ae9ff98dd6913ee4bf29bf52479f5e239b55de928acef6dbfa82
SSDEEP

6144:WGo+mjPqipSnVKkYFmUzS9n4rPY7AC42KibWKUqi+oAVLXHKVZ/1gdxEx5:+XSVKkY4UmR4rPx9kWKUZ+BXyZ/1p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cabe91324acf8fe329182a99028755b_JaffaCakes118

Files

0cabe91324acf8fe329182a99028755b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

579b628cc34ba57e35f92fc33221a0ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
LocalFree
GetEnvironmentVariableA
lstrlenA
GetCommandLineA
CloseHandle
FindVolumeClose
GetDriveTypeW
GetExitCodeProcess
ResetEvent
VirtualAlloc
WriteFile
CreateEventA
GetPrivateProfileIntW
CreateMutexA
GlobalFree
ResumeThread
InterlockedExchange
GetACP
GetModuleHandleW

user32

GetSysColor
CreateWindowExA
GetKeyboardType
GetSysColor
GetClientRect
DrawStateW
SetFocus
CallWindowProcW
GetClassInfoA
DispatchMessageA
GetCursorInfo
IsWindow
EndDialog

avicap32

videoThunk32
videoThunk32
AppCleanup
videoThunk32
videoThunk32

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ