453f018c60506e31517863f87b0f1133_JaffaCakes118 | Triage

Sharing

General

Target

453f018c60506e31517863f87b0f1133_JaffaCakes118
Size

134KB
MD5

453f018c60506e31517863f87b0f1133
SHA1

95da086c924ad61b2b0dcdcddae156b6770fce28
SHA256

ae068dda1d4ed12b4004478e685bdc93da452420c7bebfd9baa5e29ce33816f5
SHA512

4c6de016a6452ea2fa5b7a308c0ef2c19e2c95d3d13b210895f745da6a0feecf9688f14c69d62a05b777e2df4aecd3c86416566203a0cc18f9e4fae57d4240cd
SSDEEP

1536:BHHIYpEAyW0CzBiBXJMiOTygeoasc4F/EXCRHdGvv8TRJ6m+drJ:RdpPliPMi9FtrCRiv2J6m+X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
453f018c60506e31517863f87b0f1133_JaffaCakes118

Files

453f018c60506e31517863f87b0f1133_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71411def9c77f166cb46b28a8e8b33c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControls
CreateStatusWindowA

user32

SetTimer
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
TranslateMessage
KillTimer
GetMessageA
GetCursorPos
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadCursorA

kernel32

lstrcatA
WriteProcessMemory
VirtualAllocEx
Sleep
SizeofResource
SetThreadContext
RtlZeroMemory
ResumeThread
LockResource
LoadResource
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetModuleHandleA
GetThreadContext

ntdll

ZwUnmapViewOfSection

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE