230a373889c382364bfb8824779f428f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

230a373889c382364bfb8824779f428f_JaffaCakes118
Size

109KB
MD5

230a373889c382364bfb8824779f428f
SHA1

8e85abe72689929a06508c3570454cfa407cb4f2
SHA256

eb9819469beab7022c8e80cc2e7e708a70b2ac10d304540cafc595340008b2c5
SHA512

310379b933f410812e46f7b3dbb6e000cce2eb7b7998002a72654bf8e816760ebaa352387d3e1effd2e9b35266288d85da60c393cdf9326429ff46bb1f1d4700
SSDEEP

3072:NnLHku8vrPkYw09HiTeajONgmz/k2ZbqjtjK:Vf8vZwaHAaNgWZqjtj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230a373889c382364bfb8824779f428f_JaffaCakes118

Files

230a373889c382364bfb8824779f428f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a0f359c8bb67555c80c09b5b4b6194eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetCommandLineA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

Sections

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ