74d6b97e46c3e662adf4c8f2dbf8d772_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74d6b97e46c3e662adf4c8f2dbf8d772_JaffaCakes118
Size

87KB
MD5

74d6b97e46c3e662adf4c8f2dbf8d772
SHA1

5dae94e9997481f72a0b669c204031344d343761
SHA256

b7d3f90acdbd84487f688c38c889b5d1058477ddc1fc103134341395282760bb
SHA512

b249089cd3f56d3251ff65998fd1077d534f4aca2d4e097af4409f38e1d180552ce3895318a444f51c61f2bda1a4374ca35526fcd3ead727cc7b13e7d12edc06
SSDEEP

1536:IeY6UWw7VSuptuW1bYfaBj7bx6BBxwhOkW0PKGu+IqC8uqzq9jJ0TqeDMs+ROq:xYYw7VSu7bYfQjYBSje+IqlNcJ0T6s+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74d6b97e46c3e662adf4c8f2dbf8d772_JaffaCakes118

Files

74d6b97e46c3e662adf4c8f2dbf8d772_JaffaCakes118
.exe windows:1 windows x86 arch:x86

1e0b22dd6900ed585eb7b2802dcee058

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetCommandLineA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

Sections

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ