370fd007d3f4a09c9790ea3ceb23a29e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

370fd007d3f4a09c9790ea3ceb23a29e_JaffaCakes118
Size

149KB
MD5

370fd007d3f4a09c9790ea3ceb23a29e
SHA1

fdf92aa67263fca8c251e5e92a7078f80bbe8605
SHA256

d9d47a9fe05e391c400026fc8c2d8ae1ebc7cc3d1a7b2b816786449f0de33793
SHA512

bff2f6b4a4a6e3cdc9b881aed64ac7a641acbe60fc5aef7d798f49dc1d969eb97374d98648344ffb6b15c650959e00ede83c57572bb557d28ae9ebe887db6651
SSDEEP

3072:9f5GjA9dWwxlYc+zWYEUo7llQtiayLzIgr:15Gj+Qw2zWYEUwmtibzTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
370fd007d3f4a09c9790ea3ceb23a29e_JaffaCakes118

Files

370fd007d3f4a09c9790ea3ceb23a29e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce617e977e1b5be832bf46d20818b51a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDoubleClickTime
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
SizeofResource
GlobalAlloc
lstrlenA
lstrcpyA
lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
LockResource
GlobalFree
LoadResource
Sleep

comctl32

InitCommonControls
GetMUILanguage

shell32

ShellExecuteA
SHGetSpecialFolderPathA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 902B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE