3037dd1c76c9a1e10107a005a84c9209_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3037dd1c76c9a1e10107a005a84c9209_JaffaCakes118
Size

307KB
MD5

3037dd1c76c9a1e10107a005a84c9209
SHA1

a6f6f9b6051738ce10c95dbea106375a8453c533
SHA256

ce7aecc1914361a7431e947f7bb38f2d686043b40d864292f62a99d278e48acd
SHA512

04f2bf0e4f96eecad3a92dd261472c855ce20591713c67bc0affdec9aed7c0cb84ce734d172e29a2253bd637ae1340dde558794c81dbfe4fd26fef78c22d369e
SSDEEP

6144:WGDMR4fD1pK+OmWZ+OFZkOFTS06SBNdthC:HDMCb1pKFFZkRodt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3037dd1c76c9a1e10107a005a84c9209_JaffaCakes118

Files

3037dd1c76c9a1e10107a005a84c9209_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eec9c39c11b42639d7722b011b50efe8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDoubleClickTime
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
LockResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource

comctl32

InitCommonControls
GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE