832a3ec1b16e24894d138f0aa6bc47c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

832a3ec1b16e24894d138f0aa6bc47c4_JaffaCakes118
Size

32KB
MD5

832a3ec1b16e24894d138f0aa6bc47c4
SHA1

a80bf3c766d9fcb87428057541b7d6c42b844f70
SHA256

0476643ec20fae01db1048a7a50d402b8678e3a9bb47bb4a15e79b9e031718f7
SHA512

ebde362dbaa9df1bd1a5d062387d840455aeb47b6f9268f3f332bf020e955a4dc56e7dc39594c9cd02cf44dd04cef7da5331bba9575bd407e58fb25b1c6bfbd0
SSDEEP

384:G+XCWMf9j5f+THgRaIrCswcNTMONL5X7SJiCHb+fztUmTd0OF:1XCWMfh4THgRaIltNtrLSJjCxPRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
832a3ec1b16e24894d138f0aa6bc47c4_JaffaCakes118

Files

832a3ec1b16e24894d138f0aa6bc47c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50a11ff137492a5d96aa34657f84817b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
GetPrivateProfileStringA
DeleteFileA
WriteFile
GetWindowsDirectoryA
CreateProcessA
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GlobalFree
GetModuleHandleA
CreateDirectoryA
GlobalAlloc

user32

ShowWindow
GetDlgItem
EnableWindow
SetWindowTextA
EndDialog
LoadIconA
GetDesktopWindow
SendMessageA
GetDlgItemTextA
SetClassLongA
SendDlgItemMessageA
SetDlgItemTextA
CharPrevA
MessageBoxA
wsprintfA
DialogBoxParamA

gdi32

DeleteObject

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ