01e93179d45a85ae8e88eb0dc78e90cf_JaffaCakes118 | Triage

Sharing

General

Target

01e93179d45a85ae8e88eb0dc78e90cf_JaffaCakes118
Size

114KB
MD5

01e93179d45a85ae8e88eb0dc78e90cf
SHA1

8c7207b5fbabe284ba0e080f1d73061a4ce0c294
SHA256

b072d29bae0d53dfd1a70bc48cacc559535020d6e2b2039f8acdd53fe22053b9
SHA512

0658da2ee6965e992542312a7b80a486403659dc0a42b4efa9b8239aa4ef69eec16c072ec08db50fa01dcecbee6953ef0fda056c998df349d29652dcf336cfff
SSDEEP

3072:TtcIf1MhEYUla/VKZqDPJ9ZtpJgptHVMCd:JcISEq0qLRJg3Vdd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
01e93179d45a85ae8e88eb0dc78e90cf_JaffaCakes118

Files

01e93179d45a85ae8e88eb0dc78e90cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc4909275423b570a49db042b774084d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
SetDlgItemTextA
SetCursorPos
SendMessageA
SendDlgItemMessageA
GetSystemMetrics
GetDC
GetCursorPos
EndDialog
DlgDirSelectExA
DlgDirListA
DialogBoxParamA

kernel32

Sleep
LoadLibraryW
IsWow64Process
GetModuleHandleA
ExitProcess
CreateThread
AddAtomA

comctl32

InitCommonControlsEx

winmm

mciSendCommandA

gdi32

CreateCompatibleDC

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ