143fb496da5cdd6aab4411852f0af536_JaffaCakes118 | Triage

Sharing

General

Target

143fb496da5cdd6aab4411852f0af536_JaffaCakes118
Size

327KB
MD5

143fb496da5cdd6aab4411852f0af536
SHA1

df4e38466ed2359637616c43ad728ceb44ed0222
SHA256

45420187316537d02eadc2bb4d386668aa8125ef24704bdeeaff47f439c1d31a
SHA512

806179472e6adda4aea6f5a3543b54e1ce0293bd7eef04cef6d5951a11af508329790176173f6b7eeccec45b1c0d8ed456ef4aaada019993366e60a9706d91de
SSDEEP

6144:onGkNReuEuD3gle93SSoHnOkRhwls1XOFOh/IbPYgQ:onGkXREble93SScrP1XOF6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
143fb496da5cdd6aab4411852f0af536_JaffaCakes118

Files

143fb496da5cdd6aab4411852f0af536_JaffaCakes118
.exe windows:4 windows x86 arch:x86

766064b3948441c0bc80d9a6331ac02c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
TlsGetValue
LoadLibraryExW
IsBadStringPtrA
Heap32First
FreeConsole
GetLastError
GetCommandLineA
lstrlenA
ResetEvent
GetDiskFreeSpaceExA
SetLastError
EnumResourceTypesW
IsBadReadPtr
GetConsoleTitleA
CancelIo
LocalFree
GetStdHandle
VirtualProtect

user32

DialogBoxParamA
GetKeyState
GetUpdateRect
CreateWindowExA
DispatchMessageA
EnableWindow
GetMessageA
GetScrollBarInfo
CloseWindow
DragDetect
IsIconic
CreateMenu
CopyImage

hlink

HlinkCreateFromString
HlinkClone
HlinkOnNavigate
HlinkCreateFromData
HlinkNavigate

advapi32

RegCloseKey

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ