414e018c8684aff7041087707fa7bd46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

414e018c8684aff7041087707fa7bd46_JaffaCakes118
Size

315KB
MD5

414e018c8684aff7041087707fa7bd46
SHA1

08d9588799b50f04780d29d7011afe4e9a8d856a
SHA256

789af72a087a55fa529c1f00702cca54310fd99df17170e641b49f15ffb77610
SHA512

e8fc9e03fdde36eced51cb262a181115d2c4af08703862de4222d59ebb18c211049c1397306b2c9d090524f343e4af549fb547b6dd0467a3ac9cece8f8436689
SSDEEP

6144:m9J/H79OPRR2MnsFikrzhGnAvRBlMZ3s:SxU+iLkrVUAjmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
414e018c8684aff7041087707fa7bd46_JaffaCakes118

Files

414e018c8684aff7041087707fa7bd46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28cfc7488be3ed17f496f8ce4b13dd5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetKeyboardLayout
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

MultiByteToWideChar
GetVersion
lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
LockResource
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
SizeofResource

comctl32

InitCommonControls
GetMUILanguage

shlwapi

StrStrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE