162e8555ed6e09effa7926e0ab338882_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

162e8555ed6e09effa7926e0ab338882_JaffaCakes118
Size

13KB
MD5

162e8555ed6e09effa7926e0ab338882
SHA1

83db3379d5b4481ea870cf9da6fd188cc28f4a77
SHA256

ceedaa06ecc95360c681aa8a6fc73de4e307c890759cb4844b9cd8ef1a53c895
SHA512

295eb93ae7e9d38697ef769ecaedcd5f097ffbbf037cb348ebe11c7fe36af0426396dfdec4d100ee3dab5857f288ed36ea3170a61049652cf22d579c70069312
SSDEEP

384:toUB6Zf6AnqQ9WEs/rR/aiFs5jp9zG3O:mVznqwsMZry3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
162e8555ed6e09effa7926e0ab338882_JaffaCakes118

Files

162e8555ed6e09effa7926e0ab338882_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3edc8cc394c25de89a36c88b921b6861

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
ExitProcess
GetLastError
HeapFree
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
LoadLibraryA
VirtualAlloc

user32

GetDesktopWindow
GetWindowLongW
IsDlgButtonChecked
SendDlgItemMessageW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ