3aed8d8737a570cefeb598629c8f671b_JaffaCakes118 | Triage

Sharing

General

Target

3aed8d8737a570cefeb598629c8f671b_JaffaCakes118
Size

340KB
MD5

3aed8d8737a570cefeb598629c8f671b
SHA1

b29c49cf61807b2e3454bc40f9935a3177f325ef
SHA256

19f383cbc5dfa7c8dda89a0aa68b3b7e0c0fba59f5d25ffe1de03e1eb36ef539
SHA512

8643fa1a8a9cf52cd77746654e6c152f18c1b0390f514cf06ba7706d527d869d56f862cf3e2ed20609f2fe85cbfd2878207e83a4b0bc622ad6a055bc7d2367c1
SSDEEP

6144:gRtHzLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/sPJ6:MFhgh2R8O+yFqpLh+qJ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aed8d8737a570cefeb598629c8f671b_JaffaCakes118

Files

3aed8d8737a570cefeb598629c8f671b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

950f6ecc7e1689d59b0685fdf36c7e2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
CreateFileA
IsDebuggerPresent
IsBadReadPtr
FindClose
FreeEnvironmentStringsA
lstrlenA
GlobalLock
GetACP
CreateEventA
GetModuleHandleA
GetLastError
LocalFree
CreateWaitableTimerA
LoadLibraryExA
HeapCreate
CloseHandle
MapViewOfFile
GetStdHandle

user32

CreateWindowExA
SetFocus
GetDlgItemTextA
IsMenu
ClipCursor
GetSubMenu
GetDlgItem
GetMessageA
EndDialog
DialogBoxParamA
RedrawWindow
CheckMenuItem
GetParent
DrawIconEx

apphelp

ApphelpShowDialog
SdbCloseDatabase
ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ