74ae38e8025bb5f31d14886725f1dab4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74ae38e8025bb5f31d14886725f1dab4_JaffaCakes118
Size

64KB
MD5

74ae38e8025bb5f31d14886725f1dab4
SHA1

2dbe1fdadadd27ee48822106c7762450b1db2a4a
SHA256

6d698931443316644c7d207e0bc27250938e96cbbd9c46ca67dc208e08bb43cf
SHA512

c7ed21ff6d0d81fe2afbbe4442e85ef3ce5aee16df919d392b8dbd4c426954302faaf2410dfd0211a43fd6376523c227dfb3ab09873b857afd6eb4ca36edfb30
SSDEEP

1536:cJUL3S9G+1EdpGbepnbQlLXz7KiFQ+ZHkZ6l3:cJUzX+zcbIbvBFc81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74ae38e8025bb5f31d14886725f1dab4_JaffaCakes118

Files

74ae38e8025bb5f31d14886725f1dab4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf8fa55699a20cfbe98ec1e1a4e08a98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawMenuBar
DrawCaption
DeleteMenu
CreateMDIWindowA
CreateDialogParamA
CopyRect
CopyImage
CharToOemBuffA
CharPrevA
ChangeMenuA
BeginPaint
ActivateKeyboardLayout

kernel32

GetFileSize
lstrcpynA
lstrcatA
VirtualFree
TlsAlloc
SleepEx
SetLastError
SetCurrentDirectoryA
RtlUnwind
OpenFileMappingA
LeaveCriticalSection
GetVersion
GetSystemTimeAsFileTime
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
FreeResource
GetCommandLineA
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetSystemTime

Sections

.text
Size: 20KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ