4be585e151ea85f383674d3bf78fbe68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4be585e151ea85f383674d3bf78fbe68_JaffaCakes118
Size

340KB
MD5

4be585e151ea85f383674d3bf78fbe68
SHA1

afdf0d38018678509ee9501fbaddfe75c1b47afe
SHA256

3a69fc8054a37d85367037ecc380bd30d978e22f2792c929aecedd83a7b4a65e
SHA512

352c908f139c66f5282e639b2f26e35da95e1f785f9ee5574fa64645d206891796928ad2630926695f69ce52b1d072799884c433e15ce57210cbd76879c2c0f8
SSDEEP

6144:yotKLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/OSLpM:oFhgh2R8O+yFqpLh+fM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4be585e151ea85f383674d3bf78fbe68_JaffaCakes118

Files

4be585e151ea85f383674d3bf78fbe68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bf802bc4fd33b545393f06bbec23a5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
HeapCreate
MapViewOfFile
GetLastError
FreeEnvironmentStringsA
GetStdHandle
FindClose
lstrlenA
IsBadReadPtr
CreateWaitableTimerA
LoadLibraryExA
CreateEventA
GetModuleHandleA
CloseHandle
GlobalUnlock
CreateFileA
GetConsoleCP
LocalFree
GetACP
IsDebuggerPresent

user32

CreateWindowExA
GetDlgItem
GetParent
GetDlgItemTextA
RedrawWindow
EndDialog
ClipCursor
IsMenu
SetFocus
GetMessageA
DialogBoxParamA
CheckMenuItem
GetSubMenu
DrawIconEx

apphelp

SdbFindFirstTag
ApphelpCheckIME
ApphelpShowDialog
ApphelpCheckRunApp
SdbCloseDatabase

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ