690f1d689c7a28a167d3a57bae59dbe6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

690f1d689c7a28a167d3a57bae59dbe6_JaffaCakes118
Size

120KB
MD5

690f1d689c7a28a167d3a57bae59dbe6
SHA1

f026be628289e90726652eed29bd39d6844af8a0
SHA256

47c39df3f4786f0e4bc3c5c681e8fd136a08c32a75d144fa9662b7450fa6a638
SHA512

18ae7239bb803c678de161c80176c8aefc1851427dfd85774c40c3193956a1f6dcde21ca1f0e129e62defc72cec2acdd2b82534fc22dccbe14c0a76fe312101e
SSDEEP

1536:GKzO6OaRmugX5gPJf/TuM1VjqyZNhymYSbsze6/QyPXM0hHg87yz1YR/Pn07t9gb:jzeX5cTH1Bq+zJ3szOyPRhA8G+E9goi9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
690f1d689c7a28a167d3a57bae59dbe6_JaffaCakes118

Files

690f1d689c7a28a167d3a57bae59dbe6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

149233022f4086be7b917f08482b7437

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_acmdln
exit
memcpy
_except_handler3
_XcptFilter
__p__fmode
_adjust_fdiv
_initterm
__p__commode
__getmainargs
__setusermatherr
__set_app_type
_controlfp

gdi32

GetTextExtentPoint32A
SetTextColor
SaveDC

kernel32

VirtualAlloc
GetModuleHandleA
VirtualProtect
VirtualFree
GetStartupInfoA

user32

ChildWindowFromPoint
FindWindowA
BeginDeferWindowPos
GetCapture
DefFrameProcA
IsZoomed
CheckMenuRadioItem
LoadCursorA
GetMenuItemID
GetUserObjectSecurity
GetClientRect
CheckRadioButton
SetWindowTextA
GetSysColorBrush
DialogBoxIndirectParamA
DialogBoxParamA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ