155284c26e070f487775bd3844070f4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

155284c26e070f487775bd3844070f4a_JaffaCakes118
Size

686KB
MD5

155284c26e070f487775bd3844070f4a
SHA1

527c331e757c6705b91099cfa535d513fddad0d8
SHA256

14a4040459f632106a11cd782c67afdaa9a9a78ce10c286d88b2d191ab1fd952
SHA512

4fe11e76b868618195198d3dab4a8612ebc52593797ea8928083673cc1fa8d3d1b0d75f64922acd827658c1ffe93957a816ae08b33ac1055984be58271765426
SSDEEP

12288:XuTcnW9ykIl+3LxAUD/pOTkBXhDG1OuvvTLC5uvEizEBqqkWY:RnWwU/pI6DGlvr2AcJBxkWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155284c26e070f487775bd3844070f4a_JaffaCakes118

Files

155284c26e070f487775bd3844070f4a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

46d14240d028ad3a754221a955ece1bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
VirtualAlloc
VirtualFree
EnumSystemLanguageGroupsA
GetModuleHandleA
GetProcAddress
ExitProcess

user32

DialogBoxParamA
GetDlgItemTextA

gdi32

CloseEnhMetaFile
CloseFigure
GetObjectA

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE