731e60a04809b3c7c71c4ac21d66dd5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

731e60a04809b3c7c71c4ac21d66dd5b_JaffaCakes118
Size

176KB
MD5

731e60a04809b3c7c71c4ac21d66dd5b
SHA1

5018aabb59d9e34a15bc324b17a4e275fdc78f05
SHA256

a02b49404b4949ecd0db8e9b87c7b496c9f6871840015f52aa76ce8c79890e69
SHA512

45a7d0551cb0f4e50bbbdf362e9c81a77d223df805f1a77d06c6ec6858dd087d354795b085762a8377faa4c153764f70cd6036392e4b7aa6850e5ac22e7bc21b
SSDEEP

3072:fQ7vJWI+/9yddC5l+S4nmqbrOhtI1nibkNdouizECwzicd:Y8I+/YddC5lOnxbCyn4kNdoJzECwF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
731e60a04809b3c7c71c4ac21d66dd5b_JaffaCakes118

Files

731e60a04809b3c7c71c4ac21d66dd5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7d1d9220fda366adaa448e60361b06f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

CloseCluster

kernel32

GetLongPathNameW
GetWindowsDirectoryA
MultiByteToWideChar
GetVersion
InterlockedIncrement
lstrcpynA
SetThreadContext
GetModuleFileNameA
GetFileAttributesA
EnumResourceNamesA
DisableThreadLibraryCalls
InitializeCriticalSection
GetProcAddress
ExitProcess
InterlockedDecrement
LoadLibraryA
DeleteCriticalSection
GetLocaleInfoA

user32

GetActiveWindow
CharNextA
GetKeyState
UnregisterClassA
MoveWindow
ReleaseDC
PtInRect
GetDlgItem
GetWindowRect
EndPaint
SetWindowLongA
OffsetRect
SetWindowRgn
LoadAcceleratorsA
GetDC
EqualRect
IntersectRect
DefWindowProcA
SetDlgItemTextA
SetFocus
DestroyWindow
BeginPaint
SetParent

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ