14d42ddad52d2217e43afd488edc8644_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14d42ddad52d2217e43afd488edc8644_JaffaCakes118
Size

48KB
MD5

14d42ddad52d2217e43afd488edc8644
SHA1

3168d2b2e254047887879284032f3599cd4d4706
SHA256

5bdc0448798162a586796cd57b09933997ab8162897015492689a316168d046a
SHA512

a565521b59002cb36e006bcd9718f02c7c84c3ece7366ea513acc3c025ff1bc585d9a2e43b810d72d68aa6b6a243ee3f4afb7c5116e548be37999debb2d518b3
SSDEEP

768:7mU4Ln25jIk9uv1X1pzpVqzhXzJCuiwkwwgD3VDD:oSvyJazTCuiwrDtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14d42ddad52d2217e43afd488edc8644_JaffaCakes118

Files

14d42ddad52d2217e43afd488edc8644_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ace7d05e3ed98cceadeee74b6a85e23b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindVolumeClose
FindAtomA
lstrlenA
CloseHandle
GetModuleHandleA
GetConsoleFontSize
GetLastError
SetEvent
CreateThread
FindClose
Sleep
TlsGetValue
GetDiskFreeSpaceA
ReleaseMutex
DeleteCriticalSection
VirtualProtect
FindResourceExA
SearchPathA
ExitProcess
GetTickCount

user32

EndDialog
GetMessageA
DialogBoxParamA
GetKeyState
GetScrollBarInfo
IsIconic
DispatchMessageA
CopyImage
CloseWindow
CreateWindowExA
CreateMenu
EnableWindow
DragDetect
CopyIcon

wshbth

WSHNotify
WSHOpenSocket2
NSPStartup
WSHIoctl
WSHJoinLeaf

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ