7546350a984b69defb6b99d3c0d8b7c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7546350a984b69defb6b99d3c0d8b7c0_JaffaCakes118
Size

443KB
MD5

7546350a984b69defb6b99d3c0d8b7c0
SHA1

a53328f132844ddd2cfbbf3649a84d1e6788369a
SHA256

565dd0754c9f20905aef21b30134788058259ce73cc0e6cfc7591a42f44d4170
SHA512

9cd1a0651b0d0f00995b5104861172fc7461164cfabaa77b52b6725da0b71732b84d087ea662d5b39e04690c729c2943d18790b66339cb35c889ec7ae27d7e3d
SSDEEP

6144:nMoqJ8vqNchZy0/jVELySsW4j4VUkUybReQYD0DKt2FyhuszKXmySP/LbSxq5vcP:nMoqDcfzjVvvWxUkUGeP0DKduCygvoIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7546350a984b69defb6b99d3c0d8b7c0_JaffaCakes118

Files

7546350a984b69defb6b99d3c0d8b7c0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d273d69654605618d21cab3aceac255c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WinHelpW
EnableMenuItem
GetDlgCtrlID
GetInputState

kernel32

HeapAlloc
ExitProcess
VirtualProtect
InterlockedExchange

msvcrt

_gmtime64
__dllonexit
_wstati64
_wspawnv
_mbctohira
_adj_fdivr_m32i
_localtime64
toupper

ole32

STGMEDIUM_UserFree
OleRun
CoCreateInstance

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE