67afd23d71af4d90dcf45f7479da8ce2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67afd23d71af4d90dcf45f7479da8ce2_JaffaCakes118
Size

357KB
MD5

67afd23d71af4d90dcf45f7479da8ce2
SHA1

860c24a474128a1f3dbfa7a87bcfb9badd6df58c
SHA256

982e62a41b93294276230e4090b9e31b31993f01545bb009c313c056f77fa42b
SHA512

de4440dd7b8a01840e51c29bc1810fbb602c9a01499b644abd8f2ff0514879bf049217afc498736666ac419f83672717125cf67a0ee7ed5e86466e3ea305d032
SSDEEP

6144:MmEwLQsKrcTTp1G9XFBKwStAHytYNW2OkP9J4ScHkscshHG8/3bg0:MOLm2G7fStmN4239J4STscshHU0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67afd23d71af4d90dcf45f7479da8ce2_JaffaCakes118

Files

67afd23d71af4d90dcf45f7479da8ce2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01d50ae0f73f05f05537fea80e5ea072

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
GetConsoleTitleA
EnumResourceTypesW
CancelIo
VirtualProtectEx
LocalFree
IsDebuggerPresent
CreateMutexA
ResetEvent
GetModuleHandleA
IsBadStringPtrA
lstrlenA
LoadLibraryExW
Heap32First
GetStdHandle
SetLastError
TlsGetValue
IsBadReadPtr
CloseHandle
GetLastError

user32

GetMessageA
CopyImage
CloseWindow
GetMessageA
GetKeyState
DialogBoxParamA
CreateWindowExA
GetParent
GetDlgItemInt
EnumWindows
GetDlgItemTextA
IsIconic
EndDialog
MessageBoxA

setupapi

IsUserAdmin
MyMalloc
MyFree
MyRealloc
SetupCloseLog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ