621f404feaf323e457bf565c9fb897d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

621f404feaf323e457bf565c9fb897d9_JaffaCakes118
Size

60KB
MD5

621f404feaf323e457bf565c9fb897d9
SHA1

9ba6c10bbc6607604322de85547cacbe20095ad9
SHA256

953bc0c8ee58d08759137239353cda6f40b92571b1a0f5c750311b54b710dc87
SHA512

1a666edfc710388298b7e1fa8479edf08f49b67ba334252c83002d230d57834de0ea67e75b2f0f9c13c9ac2311a6c294805cc70dbabce491428346974573203c
SSDEEP

1536:ohYhYtbo3Ho5WSfuLTBGFGbccBDwCYZbDBbKTHHaFm6UF:cDt8XTBGwwczYRFyaPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
621f404feaf323e457bf565c9fb897d9_JaffaCakes118

Files

621f404feaf323e457bf565c9fb897d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e041e2b961df9a8b600c746069215c2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTimeZoneInformation
IsValidCodePage
HeapValidate
GetTickCount
GetCurrentProcessId
GetConsoleMode
ExitProcess
UnhandledExceptionFilter
SetHandleCount

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ