4068b5c86c356eea831d1078bcf99d4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4068b5c86c356eea831d1078bcf99d4f_JaffaCakes118
Size

340KB
MD5

4068b5c86c356eea831d1078bcf99d4f
SHA1

b849f38beffb940bb4afd159470cdb92fa055039
SHA256

eb49d5ce5e57febc8eabf95e6ad821b64e774dca8974cdbccb0d90817599a76b
SHA512

bcc3801550d4bade4ce88d43c56960cb1fec1a6462abfb0f879660c1844024870b4211a2798d47b21131679d71082e7d26b7e32441ea273027d3b14e1e9814c0
SSDEEP

6144:RtUdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4PydNLuPbNNi04X:Y1tUM5aV/oLOVfhaa9ZpV1SBwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4068b5c86c356eea831d1078bcf99d4f_JaffaCakes118

Files

4068b5c86c356eea831d1078bcf99d4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dab39a1a7a6e00a2b5fd22d81734669f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
CloseHandle
GetModuleHandleA
lstrlenA
GetDriveTypeA
GetConsoleCP
GetStdHandle
GlobalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateEventA
HeapCreate
FreeEnvironmentStringsA
GlobalLock
GetLastError
CreateFileA
DeleteTimerQueue
GetACP

user32

DialogBoxParamA
GetDlgItem
IsMenu
GetMessageA
CreateWindowExA
GetDlgItemTextA
RedrawWindow
GetSubMenu
SetFocus
GetParent
EndDialog
CheckMenuItem
ClipCursor
DrawIconEx

apphelp

SdbCloseDatabase
ApphelpCheckIME
ApphelpShowDialog
SdbFindFirstTag
ApphelpCheckRunApp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ