355e9d4b5c665e077a1b703696bb04f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

355e9d4b5c665e077a1b703696bb04f2_JaffaCakes118
Size

15KB
MD5

355e9d4b5c665e077a1b703696bb04f2
SHA1

861e035a4be58fe0c43b72954536982202786586
SHA256

69753f85becc4da3439804c7fee142c7001c6c3d77e4667b437578ce9caf78e0
SHA512

96aec3f4c20bd193f17924ae2ecb68908e679f1c2cc45a50f406302a38a7d0806665e512bff303da28a3d50df334114859a602e55e71621a3a2143a13ec9e0e8
SSDEEP

192:7d6Mbg8dQoVnfXC2zY5yC3PkrZe9aCldX9Iv1EjiR:7dJbgiTVfXC285H3PcQ9aCldtIvmjQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
355e9d4b5c665e077a1b703696bb04f2_JaffaCakes118

Files

355e9d4b5c665e077a1b703696bb04f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec4465c9aad96af5e80535b2ce356f94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetLastError
GetModuleHandleA
GetCommandLineA
ExitProcess
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
GlobalAlloc
GlobalLock
RtlZeroMemory
CreateFileA
WriteFile
CloseHandle
GlobalUnlock
GlobalFree
GetSystemDirectoryA
GlobalHandle
FlushFileBuffers

user32

GetDlgItem
SetFocus
EndDialog
SendMessageA
SetDlgItemTextA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ