868e1a1e1f15b4eecd5b39cf6f868de9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

868e1a1e1f15b4eecd5b39cf6f868de9_JaffaCakes118
Size

301KB
MD5

868e1a1e1f15b4eecd5b39cf6f868de9
SHA1

9ee8240bd794974f9f7d985962c7024a5708a1ee
SHA256

f52af31130c089d28a2d9878f4073ad239abb6927c0e71f69094f7fac5f6866b
SHA512

6beeea8b742bc2b335c4f9c732624c97eaebd7782a6f6fd1afb91f80a6e8be98a6a6128ccf26744be5f242e8c86319fcccadd757bafc33b40d5f8b896b543568
SSDEEP

6144:Es450+5XqR9QeVHXQPRfb/mVWxh6Eh6xDHzb:EX1O9Qe1YNm4Gj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
868e1a1e1f15b4eecd5b39cf6f868de9_JaffaCakes118

Files

868e1a1e1f15b4eecd5b39cf6f868de9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29fef01f950f5155b6fb23eef23fecc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetKeyboardLayout
GetDoubleClickTime
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

LoadResource
GetProcAddress
lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
LoadLibraryA
GlobalAlloc
GlobalFree
LockResource

comctl32

InitCommonControls

shlwapi

StrStrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE