104ecd42a27fdd04defaba8907e221c3_JaffaCakes118 | Triage

Sharing

General

Target

104ecd42a27fdd04defaba8907e221c3_JaffaCakes118
Size

436KB
MD5

104ecd42a27fdd04defaba8907e221c3
SHA1

911bbb6c2d46a3871333603ebfb99483f826c59b
SHA256

2db78bff0682f7943cfda025d2ecf37c8f728b87fd23f655b7585162faccce50
SHA512

bc5ead6e3f1adf70fd84da436fe448da1baac516783d5b60f523d7010311b35f46def82cdba4e029a801984ade56a4e8602a1a53251cdf7fa06163b6d8e8ca6f
SSDEEP

12288:XuzXZRrzOThhoBee0ZNKJpH+OMIl4k6T3Eg:wZVz0voBNv34ZbEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104ecd42a27fdd04defaba8907e221c3_JaffaCakes118

Files

104ecd42a27fdd04defaba8907e221c3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

46d14240d028ad3a754221a955ece1bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
VirtualAlloc
VirtualFree
EnumSystemLanguageGroupsA
GetModuleHandleA
GetProcAddress
ExitProcess

user32

DialogBoxParamA
GetDlgItemTextA

gdi32

CloseEnhMetaFile
CloseFigure
GetObjectA

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE