86335fc00fa57114765996c2d1818d11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86335fc00fa57114765996c2d1818d11_JaffaCakes118
Size

41KB
MD5

86335fc00fa57114765996c2d1818d11
SHA1

338a579e9da873742a8e2303a948cd5512748314
SHA256

fddd0ce789869949ba1e89d4bebeb44fa550d6e4c3a2782428842179761a969d
SHA512

cb299086404f8f399d2730308a2b68a0b980bc5a42b649f66a32f637c99cb7246cae6a1c6365f397c8d39e3663b1d01661267448d879dda7c12bcc9e605d061e
SSDEEP

768:Net5qpLcqQMDbkyKNrHy1eVAgY1/GdkK7FAm88FiVDl:mcpLcD6BySw+VmueiVDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86335fc00fa57114765996c2d1818d11_JaffaCakes118

Files

86335fc00fa57114765996c2d1818d11_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef1a6d9a35c424ce455406e813653e2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetSystemMenu
IsWindow
BeginPaint
WindowFromPoint
EndPaint
SetWindowTextA

gdi32

DeleteObject
GetTextColor
FrameRgn
CreateFontIndirectA

ole32

ProgIDFromCLSID

kernel32

InterlockedDecrement
SetFileAttributesA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
HeapAlloc
GetEnvironmentStrings
LeaveCriticalSection
DeleteCriticalSection
GetFileType
GetEnvironmentVariableA
GetCPInfo
HeapCreate
lstrcmpiA
HeapFree
GetLastError

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ