576cebee1c2411638a72c7238232e6a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

576cebee1c2411638a72c7238232e6a5_JaffaCakes118
Size

822KB
MD5

576cebee1c2411638a72c7238232e6a5
SHA1

117eb9b846c39712794b62f612ae1207fe446bb4
SHA256

d33f7be414fa1a8e585eafd77f852f342ea71275e39f32f47038091ad887aa05
SHA512

66b2177a59ed8746d119360e146f90f68080df6c99b977bbdc8b45a644bcc2c901c8602928d66034bd807ec3498f420d98553f64805beee9d1fe6d3e7cba3635
SSDEEP

12288:7L2IdB6IPZsLmcu5zNHMILoc81xTGRatLusmdZ1qvlb9zHvNoNTFe49Y:JBDhHocZYjlb9zPMpzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
576cebee1c2411638a72c7238232e6a5_JaffaCakes118

Files

576cebee1c2411638a72c7238232e6a5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2d5dc7abeec1f2fc6c97d4c59730d144

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32Next
GetDriveTypeW
OpenMutexW
lstrcpynA
GetModuleHandleA
GetPrivateProfileIntA
GetLastError
VirtualFree
GetCurrentProcessId
lstrcpynA
GetSystemTime
lstrcpynA
GetFileType
lstrcpynA
lstrcmpW
lstrcpynA
lstrcatA
GetDiskFreeSpaceW
lstrcpynA
GetCurrentDirectoryA
WriteFile
GetVolumeInformationA
VirtualProtectEx
ReadConsoleA
lstrcpynA
lstrcpynA
FindFirstVolumeW
lstrcpynA
lstrcpynA

d3d8

Direct3DCreate8
ValidatePixelShader
DebugSetMute
ValidateVertexShader

Sections

.text
Size: 19KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 798KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ