3066397d7449ae75729b2550ec1087ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3066397d7449ae75729b2550ec1087ab_JaffaCakes118
Size

123KB
MD5

3066397d7449ae75729b2550ec1087ab
SHA1

273bed440b694e3d9de6dda242cdf72f8b9b6b43
SHA256

74c4868acb8af34e9000fd85c55ae64ad0d6d2d9bbc0f75ff43e2ee4cc032352
SHA512

38fc8723e5ddd176114b8fdc4c6a6c77e80f1738eef1457b52305d7ed49099da187059fd663a27f174d734a34d08287ea2576538eb761efabbe765fc66fbb19b
SSDEEP

3072:HDAfSF0Mc6CoZ7lKHgSGAcHaVdnSqrG/k:8aFrSSAHgecHa/nSqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3066397d7449ae75729b2550ec1087ab_JaffaCakes118

Files

3066397d7449ae75729b2550ec1087ab_JaffaCakes118
.exe windows:5 windows x86 arch:x86

637ab62b0b464993925f9405af30936b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetLastError
LoadLibraryA
GetVersionExA
GetModuleHandleA
GetSystemInfo
ExitProcess
LocalFree
LocalAlloc
SleepEx
GetCurrentThread

user32

CreateDialogParamA
SetFocus
SetWindowTextA
RegisterWindowMessageA
GetTopWindow
GetClassInfoExA
CharUpperA
UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
LoadIconA
LoadCursorA
GetSystemMetrics
FindWindowA
EndPaint
DefWindowProcA
BeginPaint
MessageBoxA
DispatchMessageA
GetMessageA
CreateWindowExA

ole32

CoInitialize

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ