76c8534e7df33b5d5f321fd818ba6780_JaffaCakes118 | Triage

Sharing

General

Target

76c8534e7df33b5d5f321fd818ba6780_JaffaCakes118
Size

88KB
MD5

76c8534e7df33b5d5f321fd818ba6780
SHA1

d8bed4c6d123349e591ec58480c6828cc73f3c5c
SHA256

08c02c0afad9bf51aa3da7ce15c598fa2af9cc5b8c5fb58125d36eb64d37539a
SHA512

5ebb199a9d8407df6e63cb992cb25b7cba26c4a9be73dab6cf5153b36bb3e60f0359d30e195d642a600161da947367cf9b4f327779569285096f520a844fa5ce
SSDEEP

1536:ans4gfcMHezsHfnpEWvE7414ANI5y11KzCZhIeMeyCp87oW4:asJfHWsvpEWhC54EGP5ZW4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c8534e7df33b5d5f321fd818ba6780_JaffaCakes118

Files

76c8534e7df33b5d5f321fd818ba6780_JaffaCakes118
.exe windows:4 windows x86 arch:x86

797600e5f1e60eff9f73e49d1b1439b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

ExitProcess
WaitForSingleObject
CreateThread
lstrcatA
GetLastError
CreateMutexA
lstrcmpA
lstrcpyA
GetModuleFileNameA
lstrlenA
LoadLibraryA
GetCommandLineA
WriteProcessMemory
lstrlenW
GetModuleFileNameW
Sleep
ReadProcessMemory
GetModuleHandleA
GetCurrentProcess
IsDebuggerPresent
GetProcAddress
WriteConsoleA
FreeConsole
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetProcessHeap
lstrcmpiA

user32

UpdateWindow
IsWindow
EnableMenuItem
SetWindowLongA
GetMessageA
MessageBoxW
DialogBoxParamA

gdi32

BitBlt
StretchBlt

comdlg32

ChooseFontA

shell32

Shell_NotifyIconA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ