743ab89e0b49d2945e3b374a30b16e62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

743ab89e0b49d2945e3b374a30b16e62_JaffaCakes118
Size

342KB
MD5

743ab89e0b49d2945e3b374a30b16e62
SHA1

b796ea96cffd65ea425f47bb98071b943fe38f7f
SHA256

a4c0471895ae8666609151dbd8430c46603adfcb0c19fef0eba31fac37783a47
SHA512

043057438a19fed923d2928cafcca217f77b811f01da7c70702ba48c075490fa00acfb0b875cba81fd667ec375be5ba6ab6413878735cb1b578a76d47e34d64f
SSDEEP

6144:G0Ot1LcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/C:GFhgh2R8O+yFqpLh+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
743ab89e0b49d2945e3b374a30b16e62_JaffaCakes118

Files

743ab89e0b49d2945e3b374a30b16e62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8747e397ad6916ce165fcd86fafb102e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetModuleHandleA
CreateWaitableTimerA
GlobalUnlock
lstrlenA
FreeEnvironmentStringsA
FindClose
CloseHandle
HeapCreate
LocalFree
IsBadReadPtr
GetConsoleCP
LoadLibraryExA
CreateFileMappingA
CreateFileA
GlobalLock
GetStdHandle
IsDebuggerPresent
GetLastError
GetACP

user32

GetParent
RedrawWindow
GetMessageA
DialogBoxParamA
GetDlgItemTextA
IsMenu
DispatchMessageA
GetSubMenu
GetDlgItem
EndDialog
ClipCursor
CheckMenuItem
SetFocus
DrawIconEx

apphelp

ApphelpCheckIME
ApphelpCheckRunApp
SdbFindFirstTag
ApphelpShowDialog
SdbCloseDatabase

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ