ed283f4c005983fb966af593e1c855cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed283f4c005983fb966af593e1c855cc_JaffaCakes118
Size

63KB
MD5

ed283f4c005983fb966af593e1c855cc
SHA1

c795021ca7aa54b72b41c31dc4734d1ba54a1fde
SHA256

bd1c74b7a8e998069119fb117322a4b82b13fa612172499ae78ad3e24f973111
SHA512

e44aa3f4573977087940e44d765519969a1b7ba082943fae7d05e214d90546866c4945290d7e556f6f62195e2526979cd01e18b9fe5fdf7be5eeea4ef96c90c1
SSDEEP

1536:/xvssXOGOLL6bUzDe8V2dxjZQi/momGBIX7K:pcp6bUHe8IddZQi+u2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed283f4c005983fb966af593e1c855cc_JaffaCakes118

Files

ed283f4c005983fb966af593e1c855cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d65f2bb3db52b9e94f74e26befd1872b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowCursor
SetMenuInfo
SetFocus
OffsetRect
IsCharLowerA
EndPaint
EnableWindow
EnableMenuItem
DestroyCursor

kernel32

GetModuleFileNameW
GetSystemTimeAsFileTime
GetExitCodeProcess
GetCurrentThread
ExitProcess
InterlockedDecrement
LCMapStringW
IsValidLocale
HeapCreate

advapi32

RegSetValueExA
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ