efe749510f57783627dd8ef0fe11f1cb_JaffaCakes118 | Triage

Sharing

General

Target

efe749510f57783627dd8ef0fe11f1cb_JaffaCakes118
Size

89KB
MD5

efe749510f57783627dd8ef0fe11f1cb
SHA1

52c4b243c3af7e77637b5847cfc1956d79965f48
SHA256

159ab5a8b5014539e45dbfe0c2fc633f9aeed9e0f28c9df8a5ce9694abb8f228
SHA512

828429534cfd246ec95d04ab188a430b7c44f55c37513be82d94310fbbf9b8d96204e1acad5e047abc4e8feb766c401f673f1a9c210afe581c07439afe88d745
SSDEEP

1536:qlv7irduhbOAetTNOinDrZhQcnprVF9TGyjc:qlCdHAeB4idpxF9iyw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe749510f57783627dd8ef0fe11f1cb_JaffaCakes118

Files

efe749510f57783627dd8ef0fe11f1cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b32af7450be60ff1436439adca14578c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
AddAtomA
GetTickCount
HeapDestroy
GetLastError
FindVolumeClose
SearchPathA
FindResourceExA
TlsGetValue
SetEvent
GetModuleHandleA
VirtualProtect
ReleaseMutex
lstrlenA
GetConsoleFontSize
CloseHandle
Sleep
CreateThread
DeleteCriticalSection
ExitProcess

user32

CreateMenu
DragDetect
CopyIcon
GetScrollBarInfo
CloseWindow
EndDialog
EnableWindow
DialogBoxParamA
IsIconic
DispatchMessageA
GetMessageA
CreateWindowExA
GetKeyState
CopyImage

hlink

HlinkNavigate
HlinkClone
HlinkIsShortcut
HlinkTranslateURL
HlinkResolveShortcut

shell32

DragQueryFileA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE