63ab726c060bbd94c1d2b471517c4c57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63ab726c060bbd94c1d2b471517c4c57_JaffaCakes118
Size

10KB
MD5

63ab726c060bbd94c1d2b471517c4c57
SHA1

9c3115d6ce3426417ee4a616a5045cbf0cdcb971
SHA256

bd8e71996b1b4923f7e9173c12db537d5490bf782b939d9b38e562fafcba8067
SHA512

76df92e12bf38f881a3fc701b87b9fa3b791e7c4f9fa2749c951d04a43528df84cb60e939f03fbb32b8e9bca53c342be85d686e02181b9291dbed2d7790260b2
SSDEEP

192:6dj3KzBZYMjLHQjSbUosxKC+8E+PKc9BLseWioa:AjKzBOMjrWoPC+8EBcHsSoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63ab726c060bbd94c1d2b471517c4c57_JaffaCakes118

Files

63ab726c060bbd94c1d2b471517c4c57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e20e17ce4088d029938a17fdf7e957ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
IsBadReadPtr
GetSystemTime
GetStdHandle
CloseHandle
CreateMutexA
EnumResourceTypesW
IsDebuggerPresent
GlobalLock
SetLastError
ResetEvent
GetModuleHandleA
LocalFree
GetLastError
lstrlenA
LoadLibraryExW
GetConsoleTitleA
FreeConsole
VirtualProtectEx
Heap32First

user32

CopyImage
GetMessageA
IsIconic
GetMessageA
DialogBoxParamA
GetParent
EnumWindows
GetKeyState
CloseWindow
CreateWindowExA
EndDialog
GetDlgItemInt
GetDlgItemTextA
MessageBoxA

setupapi

SetupCloseLog
MyRealloc
MyMalloc
MyFree
IsUserAdmin

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ