610028be245637d0d8dff6151d26017b_JaffaCakes118 | Triage

Sharing

General

Target

610028be245637d0d8dff6151d26017b_JaffaCakes118
Size

83KB
MD5

610028be245637d0d8dff6151d26017b
SHA1

e9432257384e234eb82703cce0bcdd597d88ff40
SHA256

7180e010a633fcd051d9ae90a1c203ea5f784288071a0eb112be7b906c888fe8
SHA512

45d5cda1fc03687d49c06d05887ef2c1d0a07b40113fefca1efe5e21affc87c765ac9ced0e3f4d5d8cf78f52a2e7aba75d8e7a5e00fa2871a05b9946cd7f20fc
SSDEEP

1536:mSdd0ENlkH+bZ6EeC68i1Vs9dacX1d7Sb0/kEF89cI+u:mSd/rbZ6EeX8SoFdSakEe9cI+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
610028be245637d0d8dff6151d26017b_JaffaCakes118

Files

610028be245637d0d8dff6151d26017b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5ab8722580ed9b3d167aae7a39f35ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
CreateMDIWindowA
CreateIconFromResourceEx
CloseWindow
CharNextA
ChangeMenuA

kernel32

GetVersion
lstrlenA
lstrcmpA
lstrcatA
TlsAlloc
SleepEx
Sleep
CompareStringA
EnumResourceTypesA
ExitProcess
ExitThread
GetModuleHandleA
GetPrivateProfileStringA
GetSystemTimeAsFileTime
GetTimeFormatA
LocalAlloc
MapViewOfFile
OpenFile
OpenFileMappingA
SetCurrentDirectoryA
SetEndOfFile
SetLastError

Sections

.text
Size: 1024B - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data0
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE