3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118 | Triage

Sharing

General

Target

3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118
Size

112KB
MD5

3413dfa1fae22e3a618fca32f304b63b
SHA1

636311d413ad9f72da772176e0fca5aae0ae3716
SHA256

65b1dafdca6026b6267279a0ac327a409f1b9bf8e802f1f3ee0906e2ab0cd598
SHA512

7a9b166968e50ff2f5c952f317e6edc502d737107a6037bf61181a706d867d4c5c2a96f64fd50acb9c9a3a31ab54a7668855a99e38699cc1dd62bc1235d3d9d4
SSDEEP

3072:uSathrPGP3s0t85YYC8NT1FqnV6RoQNVm6tVc/bmmaPA:uzthrP+JsYYCsakhNV9QbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118

Files

3413dfa1fae22e3a618fca32f304b63b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3d6fbfbd902b576b137ca3437629b93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
Sleep
lstrcmpiA
lstrcat
GetCurrentDirectoryA
GetCurrentProcess
ExitProcess
lstrlenA
OpenEventA
GetTempFileNameA
GetVersionExA
VirtualProtectEx
lstrcmpW
lstrcatA

user32

DefWindowProcA
LoadMenuIndirectW
InsertMenuItemW
SendDlgItemMessageW
CharNextA
LoadMenuA
SetCursorPos
SetCursor
SetActiveWindow
TrackPopupMenu
PostMessageW
DefWindowProcW
keybd_event
InsertMenuW
DeleteMenu
GetKeyState

gdi32

CreateBitmap
SelectObject
RestoreDC
CreateDCW
SetBkMode

advapi32

RegDeleteKeyA
RegDeleteKeyW
RegReplaceKeyW

comdlg32

ReplaceTextA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ