1720957be7d8310f47387e7333178890_JaffaCakes118 | Triage

Sharing

General

Target

1720957be7d8310f47387e7333178890_JaffaCakes118
Size

813KB
MD5

1720957be7d8310f47387e7333178890
SHA1

ebfb66856a3475c2e0fc72ba10e4a1aa30ae255e
SHA256

84185509d85ceb5f2fc2e66aee3b40202316f91f00d6ddf10056c9115e0a6b6b
SHA512

8d4e66634bf72abc876c867de6be2ffaca994dbdd53e8f61f07636d3aac3757d66cc1992d42726cf48414e7bf5ba8592509cf86eab135c9b36737aaa2a800561
SSDEEP

12288:3nom28HIcsK5rf1/tleHk/61enGIPHQ6i5yrWTiaHP2FttIkj/tUI/YeC1r:3n48oc/h49enTfBa+yiVM31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1720957be7d8310f47387e7333178890_JaffaCakes118

Files

1720957be7d8310f47387e7333178890_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f6721b0be15e49f6dba23f6d1ff4070

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteFileA
HeapCreate
GetEnvironmentVariableA
SuspendThread
HeapDestroy
GetCommandLineA
SetLastError
Sleep
CreateSemaphoreA
GetCommandLineA
GetModuleHandleA
FileTimeToSystemTime
CloseHandle
WriteConsoleA
OpenEventA
GetStartupInfoA
FindClose
EnumResourceTypesW
lstrlenW

user32

GetWindowLongA
DispatchMessageA
PeekMessageA
CallWindowProcW
CreateIcon
DispatchMessageA
GetKeyState
DrawTextW
GetClipCursor
GetClassInfoA
GetSysColor
FindWindowA
IsZoomed

dmband

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 806KB - Virtual size: 806KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ