0951e69dfb9b6ebb071288d39e846780_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0951e69dfb9b6ebb071288d39e846780_JaffaCakes118
Size

260KB
MD5

0951e69dfb9b6ebb071288d39e846780
SHA1

892be5a254c62d77efc6a87f8b85d9e49caba1d3
SHA256

c044f3aa66cfd0750c2fa3febe2fa0398c5386a4c466c3de38f4c68cc561b0ae
SHA512

f3c1cca0712b9c839451c46ac78d825f9008f443c2f7c89fbe51e0632ba65891e1858a87a9446188ce231f9ee374f7ab7efc9367ea85d545173120a3e1ce4067
SSDEEP

3072:uE6jD1DAr6C4yvKU1RMrMwPXtYiw+0Lzryg4i3+6NVowhgJXxsElNX08Rm/dzdlP:J6/1DI9KsMtb1gz+6NkXLRmh+Pb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0951e69dfb9b6ebb071288d39e846780_JaffaCakes118

Files

0951e69dfb9b6ebb071288d39e846780_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05c66388c8216d5c0dd2d9aeed0fe9a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LoadLibraryW
GetProcAddress
GetModuleHandleA
FindCloseChangeNotification
FreeConsole
GetVersionExW
GetLocalTime
GetLastError
lstrcpyA

user32

GetAncestor
DefWindowProcW

gdi32

SetBkColor
MoveToEx
SelectObject

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 220KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ