5d553f8c978d374b99a539ed53c0b379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d553f8c978d374b99a539ed53c0b379_JaffaCakes118
Size

12KB
MD5

5d553f8c978d374b99a539ed53c0b379
SHA1

2df5a0e4435a70d5389926c5c32bf68b6c3248db
SHA256

c95f851d92a55179ffea92d7bff39db8914a644e85db09a95803de910ec2c659
SHA512

d63c8a5d3f587652158df3ee83acaf716f9d5e5307096d7a5f9b2c9a5ad0a7f5e838bdf1e31d382570f9b01bf056690cf52e56275b827cc185a955d7f32c7d70
SSDEEP

96:Auh6VU65in4NPWQoxtBQKh3GIhPzLJOSGM173sIs9zhs6BMCvL2++B8CGfMTdc71:yDi3pxPxJh7LLd1ssqMCS+JCKKI/KdT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d553f8c978d374b99a539ed53c0b379_JaffaCakes118

Files

5d553f8c978d374b99a539ed53c0b379_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea4dec6a267ebb30347f1c75ac664ec7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
MessageBoxA
LoadIconA
EndDialog
DialogBoxParamA

kernel32

ExitProcess
CreateMutexA
GetModuleHandleA
lstrlenA
UnmapViewOfFile
MapViewOfFile
GetFileSize
CloseHandle
CreateFileA
CreateFileMappingA
GetLastError

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 753B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE