5fec7107fa74a713edb79cc5197a99f0_JaffaCakes118 | Triage

Sharing

General

Target

5fec7107fa74a713edb79cc5197a99f0_JaffaCakes118
Size

6.1MB
MD5

5fec7107fa74a713edb79cc5197a99f0
SHA1

427939000b9503b984de599d81a183dbf7228cee
SHA256

b7123e3ec3543b8f191c8a7d682d3d29eb99b94fad43a1116e044b1f21bd7dee
SHA512

33a938b15611fc5fdcd1d4c9b58a6269672d082dec89aca86353ee683a74686803b71162751bbb0b711d9674fd1b70e7d577bf197664fbb93e2dc94a72ed1cf7
SSDEEP

3072:hXcRbBt65jOusvuv4ZRIp8gmR0pbBBdE8Bivf80vt65jOVZXcRbMt65jOu92+y4S:mb9vukISgmR0pbBBdulZsb9w4S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fec7107fa74a713edb79cc5197a99f0_JaffaCakes118

Files

5fec7107fa74a713edb79cc5197a99f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9318c8a64d9d22e8cab44a93e87280ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetProcAddress
CreateThread
Sleep

user32

MessageBoxA
DialogBoxParamA
SendMessageA
SetWindowTextA
EndDialog
CreateWindowExA

comctl32

InitCommonControlsEx

msvcrt

_XcptFilter
_controlfp
memset
strlen
_except_handler3
memcpy
??2@YAPAXI@Z
getenv
__set_app_type
malloc
memmove
_exit
sprintf
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ