f487cde7b808e91383862c3a26f8f473_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f487cde7b808e91383862c3a26f8f473_JaffaCakes118
Size

10KB
MD5

f487cde7b808e91383862c3a26f8f473
SHA1

eb4606a5a0c40815c805b6d3d95b95c4e1cd1ac4
SHA256

1518bf61f63e5e7e25ecdb19b2bda60f9a10a6286a05da0167383de7c7a952d0
SHA512

b9078121f3420745128fc33b11cb8a9026504d9db7bf7893f0f9e29fc81806d83ccfc0512010b3c0333cf4cdde8f146ce1486892303db58a31ad44c96713750b
SSDEEP

96:iBQFsQ9r5IlivJkwVBbPRQpndcZUVDlMp33TjdrgfH7sKilJOQGJ6UgxzCyJ:iWsQPIcJTrRe+ZUVDlMH5sbcOXq9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f487cde7b808e91383862c3a26f8f473_JaffaCakes118

Files

f487cde7b808e91383862c3a26f8f473_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0937741ef5bb6775f0ee209bdfab07a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateDirectoryA
GetModuleHandleA
ExitProcess

user32

PostQuitMessage
LoadIconA
MessageBoxA
DefDlgProcA
EnableWindow
GetWindowTextA
RegisterClassA
CreateDialogParamA
SetWindowTextA
GetDlgItem
SetDlgItemTextA
SendMessageA
GetWindowLongA
SetWindowLongA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
DestroyWindow

advapi32

RegCloseKey
RegFlushKey
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA

msvcrt

__mb_cur_max
strncpy
strncat
_pctype
_isctype

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ