0a5ebf792be2e1d1f5d9265e9f610dc0_JaffaCakes118 | Triage

Sharing

General

Target

0a5ebf792be2e1d1f5d9265e9f610dc0_JaffaCakes118
Size

304KB
MD5

0a5ebf792be2e1d1f5d9265e9f610dc0
SHA1

49f3dcc8f3057729e4f7a5c508783362c2543ce0
SHA256

8b77ce8598009e0cc925eb527e43cd7d246aadaf4ab11ad0568e3815c9150979
SHA512

71fb5053872d8568beb5ba2df4168a93d888ad56d1d012209d60fd424f6d5fa6c45618ec2e46b59bfe8503ce5f4fa18834bf03547d4f31472a18ff922cb499e9
SSDEEP

6144:f/N8wtbIilChnoT449QVz74Yf7h7OYS0pG4fE8uv5j9:Xqwl3lChoc49WkgKYS0pfERX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a5ebf792be2e1d1f5d9265e9f610dc0_JaffaCakes118

Files

0a5ebf792be2e1d1f5d9265e9f610dc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d132f3bae1123194031831c36e4f1c05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
FindClose
RemoveDirectoryW
WaitForSingleObject
ResetEvent
Sleep
ReleaseMutex
GetCurrentDirectoryA
SetLastError
GetEnvironmentVariableA
CreateMutexW
GetCalendarInfoA
GetProfileIntA
DeleteFileA
GetStartupInfoW
ExitProcess
GetTickCount
HeapCreate
CloseHandle
HeapSize
CreateFileA
GetTickCount
WaitForMultipleObjects
GetModuleHandleA
ResumeThread

user32

DispatchMessageW
GetDC
MessageBoxA
GetSysColor
PeekMessageA
CallWindowProcW
GetDC
DispatchMessageW
GetCursorPos
GetDC
GetDC
GetWindowLongA
GetClassInfoA

ctl3d32

Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ