431adda1e6506d38415e3ec1b5f2030b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

431adda1e6506d38415e3ec1b5f2030b_JaffaCakes118
Size

536KB
MD5

431adda1e6506d38415e3ec1b5f2030b
SHA1

018f2b900df64acc662b700c0da2c56118e558c4
SHA256

4254f79f40988ae00597dfea29bb3421b37dba8b9f440689a6314173139b85dc
SHA512

de5305441548e0777756ccd090252f39cebbef99b96968eec7e73c8989912876624e9f0fb9c35c0a6c9fe24f1e192311cd061c544b65667d22029a536e7d413b
SSDEEP

12288:WlM5f1yt0PM6l6DHXPBfJVOXaP/jPt00/3ZP8:GM5f1ytgBl6bFJVOXaDF00u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
431adda1e6506d38415e3ec1b5f2030b_JaffaCakes118

Files

431adda1e6506d38415e3ec1b5f2030b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dddadf62a4e9b9b96fa512b7eaf2e53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
GetModuleHandleA
GetModuleFileNameW
GetConsoleTitleA
CloseHandle
GetStartupInfoA
HeapCreate
LocalFlags
GetCommandLineA
CreateFileMappingW
DeviceIoControl
DeleteFileA
GetFileTime
lstrlenA
LocalSize
Sleep
CloseHandle
GetDriveTypeW
FindClose
IsDebuggerPresent

user32

DispatchMessageA
GetWindowLongW
IsWindow
PeekMessageA
LoadImageA
DestroyWindow
GetIconInfo
DestroyMenu
DrawTextW
BeginPaint
CallWindowProcW
DispatchMessageA
IsZoomed

dpwsockx

DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort

imagehlp

ImageUnload

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ