54de18de1957ff05d65864461fab8e73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54de18de1957ff05d65864461fab8e73_JaffaCakes118
Size

24KB
MD5

54de18de1957ff05d65864461fab8e73
SHA1

291f5e7d69d395c3b9d44409b758a8dc7550ad4d
SHA256

47324b6efe4a388d66bda89272a6610c127b64a54f49f7b60a3101f86f33193b
SHA512

b20ba1ec8f30059651e7f9a1ebbf30a401aafef6745228e17278efef8c68e737e981fb6894529fef62ef372b3c9cb934e979b9f8757080e1be1d39dd05646d54
SSDEEP

192:6v/akTmgzVdPiSEgDz1mHJa/1vfkfJIBTiU/lVOA+qvJ90YpNFK6AdkMZ/aZbUb:4/ak6YP2Hs/1vMhItRihIvFpNF2pZyZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54de18de1957ff05d65864461fab8e73_JaffaCakes118

Files

54de18de1957ff05d65864461fab8e73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b103ee9a6c2fc3de1cf5e9174822be2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
CreateMutexA
ReleaseMutex
VirtualProtect
lstrlenA
Sleep
CreateThread
GetModuleHandleA
TlsGetValue
PulseEvent
SearchPathA
GetVersionExW
FindAtomA
FindResourceExA
SetEvent
OpenMutexA
GetLastError
CloseHandle
FindClose
GetTickCount

user32

CreateWindowExA
EndDialog
CreateMenu
IsIconic
EnableWindow
DialogBoxParamA
CopyImage
GetMessageA
DragDetect
DispatchMessageA
EqualRect
GetScrollBarInfo
CloseWindow
GetKeyState

loghours

DialinHoursDialogEx
LogonScheduleDialog
DialinHoursDialog
DirSyncScheduleDialogEx
DirSyncScheduleDialog

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ