74ad0814b67136fa4af59f48bcac175a_JaffaCakes118 | Triage

Sharing

General

Target

74ad0814b67136fa4af59f48bcac175a_JaffaCakes118
Size

385KB
MD5

74ad0814b67136fa4af59f48bcac175a
SHA1

555a3281a38a01655a42fa61987b9cc0a0f37d8b
SHA256

ad7455ce1d0a59868811c32cb6d24bdf3d7dd35839b6136750118ecb34152c69
SHA512

584c0676bb4fd1ce500e29ef9376acc2a8efe9c466152d0334a136f6e89e104f435c9293b0e4cfdf337910fe121025363a2d016b2c071495ffe4922fa083488f
SSDEEP

6144:VLD4PmjPqipSnVKkYFmUzS9n4rPY7AC42KibWKUqi+oAVLXHKVZ/1gdxEx5:2qXSVKkY4UmR4rPx9kWKUZ+BXyZ/1p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74ad0814b67136fa4af59f48bcac175a_JaffaCakes118

Files

74ad0814b67136fa4af59f48bcac175a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8dbc0bc6210fa04d2438c75a5e6e77a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateMutexA
FindVolumeClose
ResumeThread
InterlockedExchange
GetCommandLineA
VirtualAlloc
CloseHandle
GetModuleHandleW
WriteFile
GetPrivateProfileIntW
GetEnvironmentVariableA
CreateEventA
LocalFree
lstrlenA
GetDriveTypeW
GlobalFree
GlobalSize
GetACP
GetExitCodeProcess

user32

GetClientRect
IsWindow
CallWindowProcW
GetCursorInfo
DispatchMessageA
SetFocus
EndDialog
GetSysColor
GetClassInfoA
GetSysColor
GetKeyboardType
CreateWindowExA
DrawStateW

avicap32

videoThunk32
AppCleanup
videoThunk32
videoThunk32
videoThunk32

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ