829d2eb8899aba9c3bead58f34612db4_JaffaCakes118 | Triage

Sharing

General

Target

829d2eb8899aba9c3bead58f34612db4_JaffaCakes118
Size

186KB
MD5

829d2eb8899aba9c3bead58f34612db4
SHA1

154fee94878baeada2c3773b9e8ef8f6efdb0086
SHA256

9c158f5709dba6ee63d42bdfb9ae402e722dc7f1bc033001e041d6a0a398bcee
SHA512

cf0e57f0b7cf7b2c045acba30a8af80012cc9413e8ee2b31dda57b67065f0ba4b3559bb5f5a0d97ed0ebf2be7fcef5a6f8bf59e2b781bd499b3563766eb3e397
SSDEEP

3072:+eG+U6qZh1ZvmdXN2PvK2/7zNnwZomK7IC/h+NIM2GrbJCz2pW4GsGIOmyxFknTb:fpUVvvYd2Pi2/nFYomk/h+NIwJ9W4r8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
829d2eb8899aba9c3bead58f34612db4_JaffaCakes118

Files

829d2eb8899aba9c3bead58f34612db4_JaffaCakes118
.exe windows:5382 windows x86 arch:x86

094330c43a5c5db3f8f8d08be15ea87f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkColor
CreateSolidBrush
TextOutW
ExtTextOutW
CreateFontIndirectW
CreateBitmap
GetStockObject
CreateFontIndirectW
CreateCompatibleDC

user32

DrawTextW
LoadMenuW
GetClientRect
EndDialog
wsprintfA
SetRect
IsWindowVisible
MessageBoxW
SetTimer
LoadIconW
DestroyWindow
LoadAcceleratorsW

kernel32

VirtualAlloc
ExitProcess
LocalFree
GetModuleHandleA
LoadLibraryA
VirtualFree

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ