29a9db3907ab33cd199c3c09a85850ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29a9db3907ab33cd199c3c09a85850ef_JaffaCakes118
Size

51KB
MD5

29a9db3907ab33cd199c3c09a85850ef
SHA1

c864e592c7f17200cf68a745847b89fdae886ba0
SHA256

56892c4b0a0dcf61d869284c2f3c5c7f6c2225b5886ed06763c9fc6874d3a965
SHA512

f24045f4040ff2eaed3797a751acc64b80fbf66260cf606beacb8474731f2bd8b1e00c901274f1f4c53013437a89d65e5fb056088986b264728b58e46c32acf0
SSDEEP

768:14zQK8EFOW+HreI1cHlajj8tLBs5tc6Eq2mMLjHxYRPP2:1498EMWcr6lajQeaFRYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a9db3907ab33cd199c3c09a85850ef_JaffaCakes118

Files

29a9db3907ab33cd199c3c09a85850ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9e576260fe17d5350eeb7e8081659364

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\kIalaWqQdasih\cKHmzAj\cpsfPJe\phoqYlKb\zQaqpsnhoL.pdb

Imports

user32

AdjustWindowRect
wsprintfA
GetCaretPos
DialogBoxParamA
MapVirtualKeyExW
LoadAcceleratorsA
ClipCursor
GetClassInfoExW
GetDoubleClickTime
MessageBoxW
LoadBitmapW
IsWindowUnicode
IsCharAlphaW
GetMenuStringA
SwitchToThisWindow
CheckRadioButton

shlwapi

StrFormatByteSize64A
StrRChrW

gdi32

MoveToEx
SetTextColor
CreateFontIndirectW
CreatePalette
GetTextCharsetInfo
SetLayout

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
tolower
_initterm
_ismbblead
_XcptFilter
strerror
_exit
_cexit
__setusermatherr
__getmainargs

kernel32

GetCurrentDirectoryW
SetLocalTime
AddAtomA
LoadLibraryExW
GetDateFormatA
GetVersionExW
GetModuleHandleA
SuspendThread

Exports

Exports

?FutureProspect@@YGHPADK|U

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE