JaffaCakes118_6702221e39f0edcac29f6a9557fde8e3 | Triage

Sharing

General

Target

JaffaCakes118_6702221e39f0edcac29f6a9557fde8e3
Size

156KB
MD5

6702221e39f0edcac29f6a9557fde8e3
SHA1

776ff21f0b80310ed948ab994b10ad1bfe91ccaa
SHA256

61ce01da25d5bfa901b634ebae1e5c27d4025580ff6e53f689414a54cf3a0686
SHA512

1c4c4e1f41f8fdfe9818eb22b5402b541c1d336ea05687fc6804b0bcd2b0fb9e04a02d08f8110256d75d3bf79fd9cb872f395d7eb05a360cf66250ba8ae94841
SSDEEP

3072:h1AV61tuPhQI6oJu0Dwv5n+qrKw/ZwTGARKCL5Mfk1DTRX5hffsnz+pTi:LbtuPheR5vpnmcQRJL0ADTRJ9fszR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_6702221e39f0edcac29f6a9557fde8e3

Files

JaffaCakes118_6702221e39f0edcac29f6a9557fde8e3
.exe windows:4 windows x86 arch:x86

eb18461dcdc56fd256a5da3dab43dab9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

InvalidateRgn
SetCapture
RealGetWindowClassA
ValidateRgn
ReleaseCapture
GetCapture
ValidateRect
ExcludeUpdateRgn
GetUpdateRgn

kernel32

SetErrorMode
FreeLibrary
GetNextVDMCommand
CompareStringA
SetThreadPriority
FileTimeToLocalFileTime
SystemTimeToFileTime
FindClose
LocalFileTimeToFileTime
FindFirstFileW
GetLocalTime
GetStringTypeW
EnumResourceNamesW
GetShortPathNameW
LoadResource
FileTimeToSystemTime
RegisterWaitForSingleObject
FindNextFileW
FindResourceW
SetEnvironmentVariableW
SetCurrentDirectoryW
SearchPathW

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ