73167d6813177606e7bc7a77da9aa35b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73167d6813177606e7bc7a77da9aa35b_JaffaCakes118
Size

188KB
MD5

73167d6813177606e7bc7a77da9aa35b
SHA1

414edadca56c2dd0ea8e5389769dddd1508b4a5e
SHA256

54fdd76520479e9ae0f4bcdcef0c5ef7b6080946fdb8afeaeb1c3827a5e4c950
SHA512

51ab04d1a4df399567be59b3e0006186ecad8933b5c664c70c29400cfba12164381b46b60cfd1ae2ac7f5979d607e6cc44f6be44f86fb81fa2418e0f0ff3b3d8
SSDEEP

1536:l/KVvhq8aP//mEGE7NqeT0GQpTLSsE9mQZjFE4ahXohF5kYlmM4Q7/hsULFfMuv:xHx/mRE0e0Ga/E9DFt2ohFrlN/2+UI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73167d6813177606e7bc7a77da9aa35b_JaffaCakes118

Files

73167d6813177606e7bc7a77da9aa35b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61dee12612c1f53deb25568caea806b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSysColorBrush
CharUpperA
SetWindowTextA
GetFocus
ShowWindow
SetWindowsHookExA
ShowScrollBar
GetMenu

kernel32

LoadLibraryA
GetLastError
GetStringTypeW
ExitProcess
GetThreadLocale
GetVersion
VirtualAlloc
GetSystemDefaultLangID

Exports

Exports

_IPc@24

Sections

CODE
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sjdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fgdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ