2227be54d6ce2a304fd4f171da870f22_JaffaCakes118 | Triage

Sharing

General

Target

2227be54d6ce2a304fd4f171da870f22_JaffaCakes118
Size

93KB
MD5

2227be54d6ce2a304fd4f171da870f22
SHA1

59ab63633ea2fbcef58252bc271f5fa97596281f
SHA256

6ac865cccaa06908020d3d6faadb04f3808a9c42901a2f27371fc26d832405ea
SHA512

9b80bd2da4f25a1ef9d21afc110f95c9b065f2bd0426bedd233acef4b1d593e851befdd39e4ff6f9ac177afc97164188a28720350b4afdc6fbec0d1e1511f67a
SSDEEP

1536:cjPgMMh/taG0ZDFKNn5y50IIy2FLIgWAb7UWPqNqmaAXnmsaT6OVQlz:cfKtaGLIMFL9v7+ha4a+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2227be54d6ce2a304fd4f171da870f22_JaffaCakes118

Files

2227be54d6ce2a304fd4f171da870f22_JaffaCakes118
.exe windows:1 windows x86 arch:x86

db4a5410121316ff99a767976395d3c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
RegisterClassExA

kernel32

ExitProcess
FormatMessageA
GetExitCodeProcess
GetProcAddress
GetTempFileNameA
LoadLibraryA
LocalFileTimeToFileTime
MulDiv
Sleep
WaitForSingleObject

advapi32

RegCloseKey
RegOpenKeyExA

comdlg32

ChooseFontA
GetOpenFileNameA
PrintDlgA

Sections

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CODE
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 22KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE