7759069138abdd88d126e8ab562b06d6_JaffaCakes118 | Triage

Sharing

General

Target

7759069138abdd88d126e8ab562b06d6_JaffaCakes118
Size

357KB
MD5

7759069138abdd88d126e8ab562b06d6
SHA1

bfd01c40e1050cfac2bfb6af029f50d8d13ae4ea
SHA256

7ae6dc9049f896ff4dd0c93b7624a762e6361a1fffdf84af94c8b74039ac918a
SHA512

9e8d7ef5d9f3173e7ccffd3ed7a05388e82d93953e4f93203152735e99eaa06c6e3e0ac23ddc34dc0edaae944584f537b9ed113b9fe2a10f49bd13e985c56245
SSDEEP

6144:MwmEm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFN3rNqR2t:lEMAxQ1bH8azq0SFNU2t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7759069138abdd88d126e8ab562b06d6_JaffaCakes118

Files

7759069138abdd88d126e8ab562b06d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f6957f2e264a53ded6dc9033ef138d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
VirtualProtectEx
CloseHandle
LocalFree
IsDebuggerPresent
LoadLibraryExW
ResetEvent
FreeConsole
GetConsoleTitleA
CreateMutexA
lstrlenA
GetModuleHandleA
EnumResourceTypesW
GetStdHandle
GetSystemTime
SetLastError
GetLastError
Heap32First
GlobalLock
IsBadReadPtr

user32

GetMessageA
EndDialog
GetMessageA
DialogBoxParamA
GetParent
IsIconic
CloseWindow
GetKeyState
EnumWindows
CreateWindowExA
GetDlgItemTextA
GetDlgItemInt
CopyImage
MessageBoxA

setupapi

MyFree
MyRealloc
IsUserAdmin
SetupCloseLog
MyMalloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ