415ce3f2a1602a3074e0b2401ad70c76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

415ce3f2a1602a3074e0b2401ad70c76_JaffaCakes118
Size

304KB
MD5

415ce3f2a1602a3074e0b2401ad70c76
SHA1

f2375a47222e8572e612e97674eefa27cf9cfb41
SHA256

3ca91b59fa15b6098b9a35e0e7f8feeeeb38b4df2ac615d36523da61e5fb264e
SHA512

b78a9e3dec936bc8b19d838bb2f3877c256abf9876a933db825f30757d55099ecf623634adfeea0d55389b7517694a94295b7a3a6adac48193d2bc4fb7764706
SSDEEP

6144:akaaiFCoTJ/4vbuV+n/kVja82Oi5rEiM/DZWBnmfKJ7LX1:a9aWtV/MBn/k5xLjWkfu7LX1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
415ce3f2a1602a3074e0b2401ad70c76_JaffaCakes118

Files

415ce3f2a1602a3074e0b2401ad70c76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5229b022c203461867f4bebb7ecd4502

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTickCount
ResetEvent
ExitProcess
GetCurrentDirectoryA
ReleaseMutex
SetLastError
GetCalendarInfoA
FindClose
DeleteFileA
GetFileSize
CreateMutexW
GetProfileIntA
RemoveDirectoryW
WaitForMultipleObjects
WaitForSingleObject
ResumeThread
GetEnvironmentVariableA
HeapSize
Sleep
CloseHandle
GetTickCount
GetStartupInfoW
HeapCreate
CreateFileA

user32

GetSysColor
DispatchMessageW
GetDC
GetDC
GetWindowLongA
DispatchMessageW
GetClassInfoA
GetCursorPos
CallWindowProcW
GetDC
MessageBoxA
GetDC
PeekMessageA

ctl3d32

Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ