554ca3c606957be4e1fa9f9fd940099d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

554ca3c606957be4e1fa9f9fd940099d_JaffaCakes118
Size

224KB
MD5

554ca3c606957be4e1fa9f9fd940099d
SHA1

79966351c5d9c1002628bf564733caf3a031cbed
SHA256

c089b0a9f5f2d52de45c02c00a6ec23ddf630b0ab8a6c812874d96e80435fdda
SHA512

2502fff32714d16ac2f02d91567f7303447016a730c4f0534b6a96c322de4bd6c7594960d01db3d2675d433b16740087bf24130aeba8d03b2f74065276a1e23a
SSDEEP

3072:KO0CBDjeh5lvkgvrK2xSEdAXwn6641cXdbITMJyR76h95MscrldZLIzxkA5rkmbW:2+uRkMD6XwEcX9ITLH5DcH1xpxV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
554ca3c606957be4e1fa9f9fd940099d_JaffaCakes118

Files

554ca3c606957be4e1fa9f9fd940099d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b650d219ea962e51e67223ead1b7fa75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
ExitThread
FindFirstFileA
GetACP
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetModuleHandleA
GetStartupInfoA
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
GlobalUnlock
InterlockedIncrement
IsBadReadPtr
IsBadStringPtrA
LoadLibraryA
QueryPerformanceCounter
SetErrorMode
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect

msvcrt

strstr
strncmp
atoi
strcmp
fwrite
wcschr

user32

ModifyMenuA
GetWindowTextA
DrawIconEx
DrawTextA

comctl32

GetEffectiveClientRect
InitCommonControls
ShowHideMenuCtl
CreateToolbarEx

Sections

.text
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ