114cf05ceb1f5720c4baabaeaa4e376b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

114cf05ceb1f5720c4baabaeaa4e376b_JaffaCakes118
Size

822KB
MD5

114cf05ceb1f5720c4baabaeaa4e376b
SHA1

d2afa58437ca164a16989e14a6bd85706d8acd5e
SHA256

92d4ae534eb41e1bba895eb3bad768b4f0d8ffe4ad68d7f1b90a9ebd951129f3
SHA512

299baabaf0465f1fcdcf011a1f25ba42c280f18548d591b3abbbd3be5009d61759d2eb3178ce748a5c902215aae6a8319cac074dcecde1ba4dea4d12b7759bcf
SSDEEP

12288:Z02hUmD/veWwYFSQrg4Q2I0iR3QkAWpX2Zj0pEA6GgGE+V+AZex/nD4:Z02hzveWwdifu3FAWoKpQfi+A6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114cf05ceb1f5720c4baabaeaa4e376b_JaffaCakes118

Files

114cf05ceb1f5720c4baabaeaa4e376b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac18705aeff11ec5cd57478276e2764f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GlobalSize
InterlockedExchange
GetDriveTypeW
GetModuleHandleW
GetACP
CreateMutexA
GlobalFree
ResumeThread
GetExitCodeProcess
CloseHandle
GetCommandLineA
ResetEvent
GetEnvironmentVariableA
VirtualAlloc
FindVolumeClose
lstrlenA
GetPrivateProfileIntW
LocalFree
WriteFile

user32

GetCursorInfo
GetClassInfoA
GetClientRect
GetSysColor
IsWindow
DrawStateW
SetFocus
EndDialog
DispatchMessageA
GetSysColor
CallWindowProcW
GetKeyboardType
CreateWindowExA

avicap32

videoThunk32
AppCleanup
videoThunk32
videoThunk32
videoThunk32

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 812KB - Virtual size: 812KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ