352575f7d7b93cfd210290bd051c804b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

352575f7d7b93cfd210290bd051c804b_JaffaCakes118
Size

16KB
MD5

352575f7d7b93cfd210290bd051c804b
SHA1

82cf216585d3dc2788dce586ba9be25b680771cd
SHA256

725a8e84f947b35ed29cbebae3fe2261834397145c2086294d6ad4aef9fe5f78
SHA512

233fa172b09096c602c544dc8356e086e4dd3521fe56ba63c4705d491f6ad9072cd7b3a133e10132fe1bd7577fd04603eff734aa10419c244cc6dd2546ce18ee
SSDEEP

384:8kqTfPfsYL+At0RvWC9xnDBzqxS7knhN:8PT0YL+e0rnVzqJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
352575f7d7b93cfd210290bd051c804b_JaffaCakes118

Files

352575f7d7b93cfd210290bd051c804b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

147d43bad8b74f3c05a914c943c3bc9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
RedrawWindow
LockWindowUpdate
InsertMenuA
InSendMessage
EndDialog
DialogBoxParamA
CreatePopupMenu

kernel32

LoadLibraryExW
lstrlenA
_lwrite
LockResource
GetLastError
GetCurrentProcessId
ExitThread
ExitProcess
CloseHandle
CreateFileA
CreateMutexA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFolderPathA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA

gdi32

GetKerningPairsA

ole32

CoTaskMemFree

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ