33317357bfc6605c4b029a1cc6ab933d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33317357bfc6605c4b029a1cc6ab933d_JaffaCakes118
Size

14KB
MD5

33317357bfc6605c4b029a1cc6ab933d
SHA1

cb5f6169d8cdcffdd845ddd50450e9210679ea9b
SHA256

587e8a803a9515601faa49c1edde54f62f95d8cc38e7e1dcde7ed2953627f155
SHA512

6903ba1550e6a4237e2eb80d6295fc455f84e8f6afe10eb6a33ff9dd0a375fa834bda5eff2469cb8933d82ea1e4c3992c3c78ad7aa96c09bb74cc98eba14b7fe
SSDEEP

192:BC+308SsQOFYsgpHP9ID1B+xMeIJVKldMb/A9r8uaItTKU:l309OFxOVID1Iozdbluz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33317357bfc6605c4b029a1cc6ab933d_JaffaCakes118

Files

33317357bfc6605c4b029a1cc6ab933d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6004f859d0cd434d0214e85838922808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
CharPrevExA
DdeQueryStringA
DestroyIcon

kernel32

GetLastError
GlobalGetAtomNameW
FreeResource
SetupComm
VirtualProtect
GetFileAttributesExA

gdi32

EngComputeGlyphSet
GdiEntry14
LineTo

comdlg32

dwLBSubclass
FindTextW
WantArrows
GetFileTitleW

Sections

.text
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE