50cbfc9f4f59d887d512cdaae8da1b8b_JaffaCakes118 | Triage

Sharing

General

Target

50cbfc9f4f59d887d512cdaae8da1b8b_JaffaCakes118
Size

503KB
MD5

50cbfc9f4f59d887d512cdaae8da1b8b
SHA1

691a6830ea4efc190edf3677232618fac01d52ce
SHA256

01c71fda419afbeafa854a3576ac0aa75b600f4e671373e678b6bd10f9b74c77
SHA512

5d46928758360f92210b3032bee1726261931e7a99eefe30b871fc0d61fe51aace8474ac83746e5786bc1b822898d9a25e263cd1a62c3ad642389a522afb1152
SSDEEP

6144:uOfYpud65BVAkxyKw51jqrP2s1U7k4wfBjVYxEWVbCvmy1dEd:uOfYfyKc1jqrdUbwNV4Vbmz1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50cbfc9f4f59d887d512cdaae8da1b8b_JaffaCakes118

Files

50cbfc9f4f59d887d512cdaae8da1b8b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d8853447201a662d0513c046f6d0ef0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DestroyWindow
DefWindowProcA
DialogBoxParamA
EnableWindow
SetTimer
LoadStringA
wsprintfA
RegisterClassExA
LoadCursorA
DispatchMessageA
TranslateMessage
GetMessageA
GetWindowRect
GetDesktopWindow
CreateWindowExA
ShowWindow
LoadIconA
SendMessageA
UpdateWindow
MessageBoxA
LockWindowUpdate
OpenClipboard
MapWindowPoints
MessageBeep
GetCursorPos
ShowCaret
GetActiveWindow
RegisterClassA
ModifyMenuA
PostQuitMessage
SetDlgItemTextA

kernel32

GetProcessHeap
HeapAlloc
GetCommandLineA
GetModuleHandleA
ExitProcess
SetLastError
GetSystemInfo
GetCurrentDirectoryA
lstrcatA
CreateFileA
GetLastError
lstrcmpA
lstrlenA
MapViewOfFile
GetStartupInfoA

Sections

.text
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ