83b49d10ccb1fda1fb03da1ddfb7673e_JaffaCakes118 | Triage

Sharing

General

Target

83b49d10ccb1fda1fb03da1ddfb7673e_JaffaCakes118
Size

128KB
MD5

83b49d10ccb1fda1fb03da1ddfb7673e
SHA1

7299a2bbc7fc7850184750fd241442060ef96b4f
SHA256

6a2350dc25342766f5e7dd6b06c959bb0fb5679e2bd3ce00007f75aa5ca24727
SHA512

1aa2717a1befe4b3f99bf095e7ab124f3b3b16678a52951dee8d0c845498510368acfc35cffcbd1b98ce31a03e82b7bf29dc4cfbb051ac5535cccc7d9480f1a7
SSDEEP

3072:FKuFzA/8wvDP0SqW0sF8sR6uXY9UQlRFMgQTWysc7b9:FKu5XwvDMXW0o8yq9FlRXUWS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83b49d10ccb1fda1fb03da1ddfb7673e_JaffaCakes118

Files

83b49d10ccb1fda1fb03da1ddfb7673e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a201ee421798131e98fee93973ab5d0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsChild
GetLastActivePopup
IsDlgButtonChecked
IsWindowEnabled
GetKeyboardType
GetSysColorBrush
GetTopWindow
GetKeyboardState

gdi32

GetTextColor
SaveDC

kernel32

LoadLibraryExA
VirtualAlloc
VirtualAllocEx
LockResource
ExitProcess
GetThreadLocale

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetDiskFreeSpaceA
Shell_NotifyIconW

Exports

Exports

_FJ653D

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ