428cce8fbd044e609fb0e8721bd30352_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

428cce8fbd044e609fb0e8721bd30352_JaffaCakes118
Size

115KB
MD5

428cce8fbd044e609fb0e8721bd30352
SHA1

4cb83151e7fe6708b95ff31a2b49c662ce76bd41
SHA256

a3724362b3888a1fa5d8e4709e37f92a34b5cef556b4340541415eb00f7c36d6
SHA512

fa86775a745983c536323e7b739408c276d284ffa573d9ec6c05b6c0b43ac230c37f8b6a43d58a8d5cb24dfe1ce462770e12f31735c72ed76183e37634f4178b
SSDEEP

1536:JBeVsIGk62WvRNh77Q3fL11VXoJGnDTRCLWO3qw64OCZIx07igPZOTqoB:JBgs2WNVQvL1jYYnDTATawjZiio/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
428cce8fbd044e609fb0e8721bd30352_JaffaCakes118

Files

428cce8fbd044e609fb0e8721bd30352_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0398d4508d3bda018d686f99c29179f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SetWindowLongW
SetWindowPlacement
CharNextA
SetWindowLongA
SetScrollRange
IsDlgButtonChecked
OpenIcon
CharLowerA
CharUpperA
GetWindowDC
SetScrollPos

kernel32

GetProcessHeap
GetLocalTime
GetOEMCP
GetFullPathNameA
ExitProcess
lstrlenA
VirtualAlloc
LoadLibraryA
GetLastError

gdi32

CreateBrushIndirect
CreateDIBSection
GetDCOrgEx
GetTextColor
SelectObject
GetClipBox

Exports

Exports

oJ4XQ@24
_VaYpOO@20
_9ouYRilUrc08bE@16
_rSXKWX

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ