295de2d79c66e7c7b5e7852613ad7e70_JaffaCakes118 | Triage

Sharing

General

Target

295de2d79c66e7c7b5e7852613ad7e70_JaffaCakes118
Size

26KB
MD5

295de2d79c66e7c7b5e7852613ad7e70
SHA1

058644c26c2de0e72094f27e7f4bb3467ae83d6e
SHA256

f513dedcb91558ae337e4dacabd9300782497759ffcd088ac797d5382530d05c
SHA512

e097f7530a647132114ac817280db06dafeae511ed4ce0db37f29c23da6aeef2dfe9b2f987d663085ccdf478e8e279a60b56e087bd31a807383e106a26b7102f
SSDEEP

384:fnzIgJAryzNtcMyx0+85uezec3EfppS5EqPeu6SNtEZVdsIv6/HKK8F:fzvJAfxY4c3EfzrqPeGt5KK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295de2d79c66e7c7b5e7852613ad7e70_JaffaCakes118

Files

295de2d79c66e7c7b5e7852613ad7e70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad3c7e3330adaf7232fa184a9091b7ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetLastError
GetModuleHandleA
GetCommandLineA
ExitProcess
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
RtlZeroMemory
RtlMoveMemory
CreateFileA
WriteFile
CloseHandle
TerminateThread
TerminateProcess
GetSystemDirectoryA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
FlushFileBuffers

user32

GetDlgItem
SetFocus
EndDialog
SendMessageA
SetDlgItemTextA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetClassNameA
GetWindowThreadProcessId
ShowWindowAsync

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ