39eb0ee281ace9410d5b4d2d080ff636_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39eb0ee281ace9410d5b4d2d080ff636_JaffaCakes118
Size

175KB
MD5

39eb0ee281ace9410d5b4d2d080ff636
SHA1

a075eeb84478958a116e107dd589cb934c32afe8
SHA256

74741c7c1e1cf756ad9ecac6850e255dcb11968b85ab77f078491c77af12d442
SHA512

412a700c5e6967864de20306d82aad37c4ea953ec4027d417a443a1ec9e1592cdb51370c49fc74fb06f7e9bec339c3dcf5c83e1a5b5624ff0e175a650af7f45d
SSDEEP

3072:zg4qqg0toHTuaWqSvDZxIY/x0MlVT1CaQoHfytRrj6MFdtrx5FuzO2BV:zg4qqgAVFqOf50M7hCa5fKRrfrxCq2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39eb0ee281ace9410d5b4d2d080ff636_JaffaCakes118

Files

39eb0ee281ace9410d5b4d2d080ff636_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f99bbf3aa7d843190ddd69fb6dd46846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringA
GetNextVDMCommand
FindResourceW
FileTimeToSystemTime
GetStringTypeW
SetThreadPriority
GetShortPathNameW
LocalFileTimeToFileTime
SetErrorMode
SetEnvironmentVariableW
FileTimeToLocalFileTime
LoadResource
FreeLibrary
EnumResourceNamesW
RegisterWaitForSingleObject
SetCurrentDirectoryW
SystemTimeToFileTime
GetLocalTime
FindClose
FindFirstFileW
FindNextFileW
SearchPathW

user32

ValidateRgn
ExcludeUpdateRgn
SetCapture
RealGetWindowClassA
InvalidateRgn
ValidateRect
GetCapture
ReleaseCapture
GetUpdateRgn

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ