3c207cdc128e6485c1470795889975b4_JaffaCakes118 | Triage

Sharing

General

Target

3c207cdc128e6485c1470795889975b4_JaffaCakes118
Size

212KB
MD5

3c207cdc128e6485c1470795889975b4
SHA1

1f9c531552ed8d01fa09729c5ba6fd141ad67329
SHA256

1770cc83d2be050dadf9447c69cc68e84cd55b058a27e5181fa595cb91aba12f
SHA512

456e1cd0ff778d2afe345f3621c193ee363a760132877fca506017601c160c2bf7d3cdbfce4512c48580a618fc05a504eedb364ae99901146c010faad29faded
SSDEEP

6144:wrQIRPWKce8a13xc0AJGQnhuna1/7cImf:BIRP1eae7F/7m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c207cdc128e6485c1470795889975b4_JaffaCakes118

Files

3c207cdc128e6485c1470795889975b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1049dd376ecda468adb661b640674c87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CreateMutexA
EnumResourceTypesW
CancelIo
ResetEvent
Heap32First
GlobalLock
IsBadReadPtr
GetModuleHandleA
LocalFree
FreeConsole
VirtualProtectEx
GetSystemTime
LoadLibraryExW
CloseHandle
GetConsoleTitleA
IsDebuggerPresent
GetLastError
SetLastError
GetStdHandle

user32

GetKeyState
GetDlgItemTextA
GetMessageA
CloseWindow
GetMessageA
GetDlgItemInt
DialogBoxParamA
IsIconic
CreateWindowExA
EndDialog
EnumWindows
GetParent
CopyImage
MessageBoxA

setupapi

MyMalloc
MyFree
IsUserAdmin
MyRealloc
SetupCloseLog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ