862de85248681ea9708b85f4a7bef908_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

862de85248681ea9708b85f4a7bef908_JaffaCakes118
Size

323KB
MD5

862de85248681ea9708b85f4a7bef908
SHA1

fd665f299efe5c2b43fdb8aaf9e2a6f202e1a36b
SHA256

38e1a88b13f240fe53d76536ccb26040b45e1b1dfc42311cc969a4eafd9b3319
SHA512

29e78070eacb2578acfb0ecf016afeb5cbfaa17dd525fc63a18361c38d37b56b380ac7b605be1dc75a8b8313f9d105ca1674269563f0205a912db12275aed833
SSDEEP

6144:m2v1AlD6p1YgNsTKG8rHucLBsKz4XOHENTuTFn03gIsVHP5ydcnxyyfpChdDV:mc1AlDA3NsTsrOcyKseGiMfycdcxyysZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
862de85248681ea9708b85f4a7bef908_JaffaCakes118

Files

862de85248681ea9708b85f4a7bef908_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b78ab610d9eb4e65aae33704e0bbb634

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
EnumResourceTypesW
LocalFree
CreateMutexA
lstrlenA
IsDebuggerPresent
ResetEvent
FreeConsole
IsBadReadPtr
TlsGetValue
VirtualProtectEx
SetLastError
GetStdHandle
CancelIo
GetLastError
CloseHandle
Heap32First
GetModuleHandleA
GetConsoleTitleA
IsBadStringPtrA

user32

GetDlgItemTextA
GetParent
CloseWindow
DialogBoxParamA
GetDlgItemInt
EnumWindows
IsIconic
EndDialog
CopyImage
GetKeyState
GetMessageA
CreateWindowExA
GetMessageA
MessageBoxA

setupapi

SetupCloseLog
MyFree
IsUserAdmin
MyRealloc
MyMalloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ