29af95f6b551c1d5e16dbe7b91662161_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29af95f6b551c1d5e16dbe7b91662161_JaffaCakes118
Size

295KB
MD5

29af95f6b551c1d5e16dbe7b91662161
SHA1

6a0d07bbe29f54ec0b5ff02fed35dc8a946d589d
SHA256

c9a4052f57a3b7e159fffbe479ebf4ff6ac2b25c6c8178ab75fda5cee41fe7e8
SHA512

e5773d1c67518dc1eb20961b72abac04b74d21c5b6f7868e44fcb91a14364045dda070bc8c1d3001d249f9e998f4c27d16335539ef3d30a3868d7f294c7d04f7
SSDEEP

6144:qUCPUJHEDaU7caROPXFNzlOrIoJ9AyKjbK6zLp3UrtdCOW0L62:qUCZDao3ROX0coJ9AyKPK8LN4tdCzk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29af95f6b551c1d5e16dbe7b91662161_JaffaCakes118

Files

29af95f6b551c1d5e16dbe7b91662161_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11f0c595d209748b26dc98653108a98c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
WriteConsoleA
ReleaseMutex
SetEvent
CreateSemaphoreW
OpenEventA
FindResourceExA
ExitProcess
HeapDestroy
CloseHandle
SuspendThread
lstrlenW
GetEnvironmentVariableW
GetCommandLineW
GetStartupInfoA
HeapCreate
GetVersion
GetModuleHandleA
DeleteFileA
CloseHandle

user32

DrawTextW
SetFocus
CallWindowProcW
DispatchMessageA
IsZoomed
DispatchMessageA
GetKeyState
GetWindowLongA
GetClassInfoA
FindWindowA
CreateIcon
GetSysColor
PeekMessageA

docprop

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ