84ab9abd0c507511442cd284d0dddc76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84ab9abd0c507511442cd284d0dddc76_JaffaCakes118
Size

105KB
MD5

84ab9abd0c507511442cd284d0dddc76
SHA1

cdb68ff52f4d9ced05f77588be0de85b5af09553
SHA256

a9c4dc4b54a77b24db438fcc9b2e6de9ecc1ef9f978827908acff68dda01a820
SHA512

108b3519396fe61914f3641f31c41b370a20a5d5c39371d232977de8c5cb99594494fbac03d1a99bcce39e8c9b41a5b2f6b09057dcf5a2dca75bc142b587577f
SSDEEP

1536:KJrtgostpW4t/WFTIv553wwdt3qNRNCIefRpnWtyNT3cZpq6l6t3SQBu:OUUAWYuCRFulqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84ab9abd0c507511442cd284d0dddc76_JaffaCakes118

Files

84ab9abd0c507511442cd284d0dddc76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba05ac2b89214ec43130081700d1d170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
GetStdHandle
GetLastError
CreateMutexA
IsDebuggerPresent
CloseHandle
GlobalLock
Heap32First
LocalFree
GetConsoleTitleA
SetLastError
EnumResourceTypesW
CancelIo
ResetEvent
IsBadReadPtr
VirtualProtectEx
lstrlenA
GetSystemTime
GetModuleHandleA
LoadLibraryExW

user32

GetMessageA
GetKeyState
EndDialog
DialogBoxParamA
CloseWindow
GetDlgItemInt
CreateWindowExA
EnumWindows
GetDlgItemTextA
GetParent
GetMessageA
CopyImage
IsIconic
MessageBoxA

setupapi

MyRealloc
MyFree
IsUserAdmin
SetupCloseLog
MyMalloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ