09e86951d34b3a999fec7e8409bee1b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09e86951d34b3a999fec7e8409bee1b6_JaffaCakes118
Size

200KB
MD5

09e86951d34b3a999fec7e8409bee1b6
SHA1

28233e819af58ece3e7537b74ed072a3ae1e08c4
SHA256

5b863921131b00e04bfef5002e1e795e6d167e6992eb6cbc1befba17f27e917d
SHA512

31ad7420683f23bc1fe9ca9acdb6effa40664d54f646d79fad62e878b0be354379ad3cd89d43a9478bfa147244d03eb35096dd2852d56f752135dbe835f7a46d
SSDEEP

3072:4bTbDbTbMEW7NXh9x2HDdw2+9biEdBDM6EH:4bTbDbTbMEWp4jm2+ZJDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09e86951d34b3a999fec7e8409bee1b6_JaffaCakes118

Files

09e86951d34b3a999fec7e8409bee1b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0ff6da0210e3300947b7a0615e4768d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
SetDlgItemTextA
SendMessageA
ReleaseCapture
MessageBoxIndirectA
LoadIconA
GetDlgItem
DialogBoxParamA
wsprintfA
EndDialog

kernel32

ReadFile
CreateFileA
Sleep
HeapAlloc
SetFilePointer
ExitProcess
GetLastError
GetModuleHandleA
GetTickCount
RtlZeroMemory
lstrlenA
FindResourceA
LoadResource
SizeofResource
CreateMutexA
HeapDestroy
HeapCreate
WaitForSingleObject
CloseHandle
CreateThread
SetThreadPriority

comctl32

InitCommonControls

gdi32

CreateFontA

winmm

waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutOpen
waveOutClose
waveOutGetPosition
waveOutPrepareHeader

advapi32

CryptAcquireContextA
CryptReleaseContext

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ