718ad5b27809fd927a715ad2b791f8d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

718ad5b27809fd927a715ad2b791f8d6_JaffaCakes118
Size

340KB
MD5

718ad5b27809fd927a715ad2b791f8d6
SHA1

1e7914013588ff0a2b8e75995027da72859d33e3
SHA256

d4a4502f7f0860fbf965d62b03148294d4eb4516b819541c0c70d8ff8a81e3d3
SHA512

c1d2b5c1434fc24b56f76a3593602e62ce95999629e1fee94af453e97f830351a52cd26225af779dc6782257ae061e9540a39e3ad28c6d6ff38313a4e6b3ee5f
SSDEEP

6144:NetHzLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/sPJ6:8Fhgh2R8O+yFqpLh+qJ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
718ad5b27809fd927a715ad2b791f8d6_JaffaCakes118

Files

718ad5b27809fd927a715ad2b791f8d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

950f6ecc7e1689d59b0685fdf36c7e2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
CreateFileA
IsDebuggerPresent
IsBadReadPtr
FindClose
FreeEnvironmentStringsA
lstrlenA
GlobalLock
GetACP
CreateEventA
GetModuleHandleA
GetLastError
LocalFree
CreateWaitableTimerA
LoadLibraryExA
HeapCreate
CloseHandle
MapViewOfFile
GetStdHandle

user32

CreateWindowExA
SetFocus
GetDlgItemTextA
IsMenu
ClipCursor
GetSubMenu
GetDlgItem
GetMessageA
EndDialog
DialogBoxParamA
RedrawWindow
CheckMenuItem
GetParent
DrawIconEx

apphelp

ApphelpShowDialog
SdbCloseDatabase
ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ