5a8312908292a3eb527179f7e7f56112_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a8312908292a3eb527179f7e7f56112_JaffaCakes118
Size

84KB
MD5

5a8312908292a3eb527179f7e7f56112
SHA1

73ebe67b96e606e95aa3ba04123bd3c8089af3f3
SHA256

a6f76840ab5b7689d0e7ec81ab0f1e04298337bc180b17b9a0fe754751b33363
SHA512

d3ebdcdde7a1ebc583d0a746c350d0c5bc0a5e0adbac2eeedaf8374cde67ab7ed7b80fee4d2cf176aa4f17810077e8036c469e226e6ebd0b3a9c9a14b84160c9
SSDEEP

1536:vkPMrUyt8CD5pxfH66urhb2MIzr21bL3i4/L5NZafiERRWSRFbPdn51NFww0wIhP:v5rUytfpF66YQMIzaL3i4z5NZafiERRp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8312908292a3eb527179f7e7f56112_JaffaCakes118

Files

5a8312908292a3eb527179f7e7f56112_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcef07c4d8f830f526d34865092fd418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObjectEx
SetWaitableTimer
CreateEventA
CreateWaitableTimerA
CancelWaitableTimer
GetTickCount
VirtualAlloc
GetFileSize
VirtualQuery
CreateFileA
SetEvent
CreateMutexA
VirtualProtect
ExitThread
WriteFile

user32

FindWindowA
GetSystemMetrics
CreateDialogParamA
ShowWindow
GetWindow

comdlg32

PrintDlgExA
CommDlgExtendedError
GetSaveFileNameA
FindTextA
GetFileTitleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ