f9ec0ab12d5b46ac739c23e63b83a7be_JaffaCakes118 | Triage

Sharing

General

Target

f9ec0ab12d5b46ac739c23e63b83a7be_JaffaCakes118
Size

382KB
MD5

f9ec0ab12d5b46ac739c23e63b83a7be
SHA1

881e40ad41aff9066af81fc7d98b8178d1c157ce
SHA256

2ba0682580eece7df7ab6253b7c49fb06a0d3daec5ee0be12c23131bcaff92ac
SHA512

683659f17bd4c5da7c747a384a72528dd3c0bda765b10be0b36c4a6972aff65a43041af459359582d598de27ec2d93657b48e331d5cd02393b3c2b769663d2d5
SSDEEP

768:UmTJndGfHXmBkSiZ+jYVKwMYougnok4FxIgHXL:NTJnoXA29Augv4FxIgb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9ec0ab12d5b46ac739c23e63b83a7be_JaffaCakes118

Files

f9ec0ab12d5b46ac739c23e63b83a7be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

860abe870ef7d768a13528fc3a6a3943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
lstrcpyA
Sleep
GetFileSize
GetTickCount
FreeLibrary
LocalAlloc
lstrlenA
LocalFree
GetStdHandle
lstrcatA
GetVersionExA
GetCommandLineA
CreateEventA
GlobalFree
GetStartupInfoA
GlobalAlloc
GetLastError

user32

SetWindowTextA
GetClientRect
BeginPaint
DialogBoxParamA
CreateWindowExA
LoadIconA
DispatchMessageA
SetFocus

msvcrt

wcschr
_acmdln
exit
__p__fmode
_XcptFilter
_exit

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 369KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ