15f3844ca642c588203edf3dd6273510_JaffaCakes118 | Triage

Sharing

General

Target

15f3844ca642c588203edf3dd6273510_JaffaCakes118
Size

116KB
MD5

15f3844ca642c588203edf3dd6273510
SHA1

7422218ebc228c50f27530e7a50b8177f1c97b99
SHA256

a03a3f4303fa4ed93776349cbff535cdd9a9b4f594ce5d8ab7fd74d1724dd106
SHA512

8a4638f74c14c9f616640fb8dd7fd58e7e598f585dcad4419bf7ea85ff961950de67919329b777b727a9bc426a0bd60783e7ecb4fd6d9476b553122248977e1f
SSDEEP

1536:omZy6UqI8IbDitKzbkI77GR49me6WZk+uiXQRR5RzYL0H0CMw:o1qlMOAzWZ6RyNzTUv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f3844ca642c588203edf3dd6273510_JaffaCakes118

Files

15f3844ca642c588203edf3dd6273510_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12c79de6800300a3260124804dd4c375

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetModuleHandleA
RtlZeroMemory
lstrlenA
RtlMoveMemory
ExitProcess
LoadResource
FindResourceA
SetFilePointer
ReadFile
CreateFileA
Sleep
HeapDestroy
HeapCreate
HeapAlloc
SizeofResource
SetThreadPriority
CreateThread
CloseHandle
WaitForSingleObject

comctl32

InitCommonControls

user32

SendMessageA
wsprintfA
DialogBoxParamA
EndDialog
GetDlgItem
GetDlgItemTextA
GetWindowTextLengthA
ReleaseCapture
SetWindowPos
SetDlgItemTextA
SendDlgItemMessageA

winmm

waveOutGetPosition
waveOutWrite
waveOutUnprepareHeader
waveOutReset
waveOutPrepareHeader
waveOutOpen
waveOutClose

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ