5a97692d164d47e7baf456fe297d9830_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a97692d164d47e7baf456fe297d9830_JaffaCakes118
Size

357KB
MD5

5a97692d164d47e7baf456fe297d9830
SHA1

ebe642f087e636f6b7a5128c43452fe277de7ce6
SHA256

84d292fb3b9c991054da9c2271c2d2d461c710b6b914481860d8a8a387126008
SHA512

8acd98c4f92a1237b8de55557879185565fa7cba92363a37e7f3971a3490bb3d64ce46c622375756dfd29da2a911848c7798f1dde023f8c6d70cdd73b3fa4090
SSDEEP

6144:fmSwLQsKrcTTp1G9XFBKwStAHytYNW2OkP9J4ScHkscshHIqmc:fsLm2G7fStmN4239J4STscshx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a97692d164d47e7baf456fe297d9830_JaffaCakes118

Files

5a97692d164d47e7baf456fe297d9830_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7422000f0bc1ef96c5ba903d37cd9b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesW
GetStdHandle
LoadLibraryExW
IsBadStringPtrA
Heap32First
GetConsoleTitleA
GetLastError
TlsGetValue
LocalFree
CloseHandle
IsBadReadPtr
CreateMutexA
GetModuleHandleA
IsDebuggerPresent
FreeConsole
CancelIo
SetLastError
VirtualProtectEx
lstrlenA
ResetEvent

user32

CreateWindowExA
GetDlgItemTextA
GetKeyState
CloseWindow
EnumWindows
GetMessageA
IsIconic
GetDlgItemInt
DialogBoxParamA
EndDialog
CopyImage
GetParent
GetMessageA
MessageBoxA

setupapi

IsUserAdmin
MyMalloc
MyFree
SetupCloseLog
MyRealloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ