f699896d55ca262447b334827cf5e147_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f699896d55ca262447b334827cf5e147_JaffaCakes118
Size

60KB
MD5

f699896d55ca262447b334827cf5e147
SHA1

9eaaec2d7f733f82d17fb29e441763fee82aaf77
SHA256

e8e3b0c43df370aef37f885bc434d68c8989f2bdb03d71e8f8220f7c688d5956
SHA512

2067c2de9c00a052c50e123d9ecd8cbfeb28dc0df45e302f6e4d86cc4af9a59993fba2e2f9aaec672e065ce94931c42c08bf2bfbb3e94d56622a3315c5bea1e2
SSDEEP

768:Jpo9IjNYi+Bpe2JNpi/haoji5o6keJncciyTBzg:7o9IjNYi+BHJiwSPJeJccR1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f699896d55ca262447b334827cf5e147_JaffaCakes118

Files

f699896d55ca262447b334827cf5e147_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b58904afc650f017a57cf4d94e4d6567

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
LoadIconA
SendMessageA
SetDlgItemTextA
SetWindowTextA
DialogBoxParamA

kernel32

ResumeThread
ExitThread
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FindResourceA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
LoadResource
LockResource
MapViewOfFile
SizeofResource
UnmapViewOfFile
Sleep
SetThreadPriority
GetFileSize
SuspendThread
CreateThread

shell32

ShellExecuteA

comctl32

InitCommonControls

comdlg32

GetOpenFileNameA

winmm

waveOutWrite
waveOutClose
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ