72cc24a3ae4d1a69ecb1be3ffcc1f170_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72cc24a3ae4d1a69ecb1be3ffcc1f170_JaffaCakes118
Size

155KB
MD5

72cc24a3ae4d1a69ecb1be3ffcc1f170
SHA1

88a04d575d460eb9705fba067b326673952509e1
SHA256

420dea47d95f739e41333c2f15d119464bad2740289cbd637b0f3c4fcd2c5427
SHA512

70aac7c97f4417af09f13859bb4bce8888ccb1aced102407ca2903fa3e6265c719e50ba86721f407c9970fe3782bb58f3b967654d832b58453402d7d353daaf3
SSDEEP

3072:eqFZNfcsAIIBOGBouJDcdiWuE2h+imW64c1Pntec0I88acF6mw27lxC:eqFZ5c/IyVBJDcdiWunciV64cpntecp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72cc24a3ae4d1a69ecb1be3ffcc1f170_JaffaCakes118

Files

72cc24a3ae4d1a69ecb1be3ffcc1f170_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b6483bac5d0f78651edc525799797a1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxIndirectParamA
IsChild
DdeGetLastError
SetWinEventHook
TranslateAcceleratorA
SetWindowTextA
TranslateMDISysAccel

msvcrt

_spawnv
_ui64toa
_Gettnames
_fpieee_flt
_strnset
gmtime
_mbsnset

kernel32

ExitProcess
GetStartupInfoA
VirtualProtect
TerminateJobObject

ole32

CoBuildVersion
CoUninitialize
CoResumeClassObjects

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 869B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE