4226be46ba53c566a50dbe5bbc4a2fca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4226be46ba53c566a50dbe5bbc4a2fca_JaffaCakes118
Size

570KB
MD5

4226be46ba53c566a50dbe5bbc4a2fca
SHA1

dd97a96e1e2581adf5327d788b93422cfe40cab9
SHA256

ee1385b8b00637692c808832b0940aa17af2d711a556591333353ea24c98e57c
SHA512

dfcf75c8a60420b75cede05d83d044284b19d57236b5057ee2ee99a1214e171399eab61018b3f2628e1b12131e07f22c32e88ae6defe0d009757cbce40e8418e
SSDEEP

6144:4T9pB5mzgEgqeI4PjKdPUf5BJT0/6bp4C1/p:i7B0zgExPtdPUBByO/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4226be46ba53c566a50dbe5bbc4a2fca_JaffaCakes118

Files

4226be46ba53c566a50dbe5bbc4a2fca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

645a11ace6e7b7c91696032f9479687b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize

kernel32

ExitProcess
GetCPInfo
SetEvent
_lread
GetLargestConsoleWindowSize
CompareStringA
GetVersion
_llseek
OpenMutexA
FreeResource
VirtualAlloc
RaiseException
GetFullPathNameA

oleaut32

SafeArrayGetElement
SafeArrayPutElement
SysFreeString
SafeArrayGetLBound
SysAllocStringLen

user32

LoadKeyboardLayoutW
ReleaseDC
GetNextDlgTabItem
CreateCursor
AppendMenuW
ReleaseCapture
LoadKeyboardLayoutA
ScrollDC
UnregisterClassW
SendDlgItemMessageA
GetWindowInfo
SetRectEmpty

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ