139ce01ecca9e5fdc46ba47d7339e13b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

139ce01ecca9e5fdc46ba47d7339e13b_JaffaCakes118
Size

822KB
MD5

139ce01ecca9e5fdc46ba47d7339e13b
SHA1

ee93e8fe0f3cb6657402d144337fc7084745f020
SHA256

c18b247d2d7be178df49658b9a89bb0d1329c44a31a8c89056328cdd49ea98e2
SHA512

dbb39bc4e66f6e67901414210b73f2633bd46399fd30f2cc06fb140d816a4f509fa097c538db9176329094e61ad61d69dc3102a81d268a9339ac9d014a57c32f
SSDEEP

24576:uWRwOhnTQDIHUxagQ9dvu2Bh+O+HwYcyxZ/Uqe:ucwOc8gQ/uWEDUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
139ce01ecca9e5fdc46ba47d7339e13b_JaffaCakes118

Files

139ce01ecca9e5fdc46ba47d7339e13b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1c6bc30771c4165b87a331020b55a9aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ReadConsoleA
lstrcpynA
GetCurrentDirectoryA
GetPrivateProfileIntA
VirtualProtectEx
lstrcpynA
lstrcpynA
lstrcpynA
OpenMutexW
GetCurrentProcessId
lstrcatA
GetDiskFreeSpaceW
FindFirstVolumeW
GetDriveTypeW
VirtualFree
lstrcpynA
GetFileType
lstrcpynA
lstrcpynA
lstrcpynA
Heap32Next
lstrcpynA
GetSystemTime
WriteFile
lstrcpynA
GetModuleHandleA
GetVolumeInformationA
lstrcmpW

d3d8

DebugSetMute
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader

Sections

.text
Size: 19KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 798KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ