52fd5f4dc038c9f467b6ff4bc4142a41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52fd5f4dc038c9f467b6ff4bc4142a41_JaffaCakes118
Size

743KB
MD5

52fd5f4dc038c9f467b6ff4bc4142a41
SHA1

b0038ba5268070d059a5110636f5fee412506653
SHA256

f06888a5229e4c890d053abc4ea7d7d91fa0e3af9c7df7387e0278c62da610dd
SHA512

249603aeed5858f30c7b12427b593fbeb23fd2106657ab15735d135c4c4cc3294734562ad1839380a65967811da1c43d22be8e1d42392763b93cc862bb5f92d5
SSDEEP

12288:X/Ub5fXST1ksrFv0sLmZZPLdMHuZ0aaQHaieZckd2wIwQbI51Km4Hv6xq8RYuHO:ufihZrZHLmOY9Z0jd2wIDbI54NPYq8Rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52fd5f4dc038c9f467b6ff4bc4142a41_JaffaCakes118

Files

52fd5f4dc038c9f467b6ff4bc4142a41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e46779cfd194eea089368b472af49ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GlobalFree
FindAtomW
ResumeThread
SetLastError
EnumCalendarInfoW
GetDriveTypeW
ReadFile
GetConsoleAliasW
LocalFree
GetCurrentThreadId
CreateMailslotA
EnterCriticalSection
GetPrivateProfileStringW
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
SetEvent
HeapCreate
FindClose

user32

GetKeyboardType
GetKeyState
DispatchMessageA
GetCursorInfo
DrawTextW
GetMenuInfo
GetClientRect
DispatchMessageA
IsWindow
GetSysColor
SetFocus
GetClassInfoA
CallWindowProcW

atl

AtlAdvise
AtlAdvise
AtlAdvise
AtlAdvise
AtlAdvise

desk.cpl

DeskSetCurrentScheme

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 733KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ