f2af88404920275f6f21fec9e22cea9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2af88404920275f6f21fec9e22cea9f_JaffaCakes118
Size

10KB
MD5

f2af88404920275f6f21fec9e22cea9f
SHA1

01000435d161ae769d6b5ac96b445105f6b470c5
SHA256

a52f42be3e9f4e9b51c51122abd96cbe2842117c762b4c4092b86efcff205249
SHA512

f14bc5ac7474c5a8085fa81470021303a2c8a2960aef9b2b9a091a9c33662583b7056065494547bfc1b5b380ece7e77804087f571a9fdf539ca8a1ff46316eb1
SSDEEP

96:iBQFgQ9gV8+R1RoJBaIrZUVDlMp33Tjdr2X4hxoWhCilJOQGJ6UgxzCyJ:iWgQKV8w2zZUVDlMH5yYOXq9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2af88404920275f6f21fec9e22cea9f_JaffaCakes118

Files

f2af88404920275f6f21fec9e22cea9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0937741ef5bb6775f0ee209bdfab07a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateDirectoryA
GetModuleHandleA
ExitProcess

user32

PostQuitMessage
LoadIconA
MessageBoxA
DefDlgProcA
EnableWindow
GetWindowTextA
RegisterClassA
CreateDialogParamA
SetWindowTextA
GetDlgItem
SetDlgItemTextA
SendMessageA
GetWindowLongA
SetWindowLongA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
DestroyWindow

advapi32

RegCloseKey
RegFlushKey
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA

msvcrt

__mb_cur_max
strncpy
strncat
_pctype
_isctype

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ