15bf2a22b45ee5e164e601d2b2d3e5ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15bf2a22b45ee5e164e601d2b2d3e5ed_JaffaCakes118
Size

88KB
MD5

15bf2a22b45ee5e164e601d2b2d3e5ed
SHA1

544a01607e7e2c58919cbdbff490407f27cd152a
SHA256

157437d04f8d24a70fccb1b57f97eac97f6c0a149a39e1dc12c9a3780c1d6633
SHA512

ebe7c1fcaa723e6cea4a0550ec219e7a1add10ade0da3eb0dbf10401a657161f659c5b14f570314e3c0b71e3ad42720b4fcfd59102bc2579ca161c3c9066ae3c
SSDEEP

1536:nTKhW7TlVzJEIyc8PEtVspj+HTJ609fNtQTUf/rZ0I25oRJPGs3aW:DVJZyc8cVs9+HTJ6YfeiT2V5oRJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15bf2a22b45ee5e164e601d2b2d3e5ed_JaffaCakes118

Files

15bf2a22b45ee5e164e601d2b2d3e5ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8556ee860e35b150b15ed7bee7996ee0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DebugActiveProcess
ExitProcess
GetACP
GetCommandLineA
GetCompressedFileSizeW
GetLastError
GetModuleHandleA
GetProcessPriorityBoost
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchangeAdd
ReadFileEx
SetDefaultCommConfigA
SwitchToThread

user32

SetWindowLongA
SetPropA
SetForegroundWindow
PeekMessageA
GetSystemMetrics
DestroyWindow

comctl32

ImageList_DragLeave
ImageList_GetImageRect

ole32

CoCreateInstance
CoCreateGuid

dbghelp

SymUnloadModule
SymFindFileInPath
FindFileInSearchPath
lmi
SymGetLinePrev
SymGetSymNext64

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ