8c534450c15fb9e00551d6a9f62241b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c534450c15fb9e00551d6a9f62241b9_JaffaCakes118
Size

9KB
MD5

8c534450c15fb9e00551d6a9f62241b9
SHA1

410b615790568af794048b08a0a27a0ecc7fd6e1
SHA256

8ca9303356df5940e7b534e77a65309ef8c1797051870f0eea4e80f0527ab700
SHA512

f431c92f1960a9deb66e2e91dbbd0671323b6b6b61c07c4424ac0c20a57496f6c861383ff692a50dd850c673579bc74a986d86138af7f1623f2b3f4e2d98fbef
SSDEEP

192:AlHDxJ/3iwhYjdyFJccXHhU8nQE9+FbV:qDf/SwhWwccXAE9+F5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c534450c15fb9e00551d6a9f62241b9_JaffaCakes118

Files

8c534450c15fb9e00551d6a9f62241b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f4676b26ce5d8430884632155523735

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextLengthA
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA

kernel32

lstrlenA
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
SetFilePointer
SetEndOfFile
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
DeleteFileA
ExitProcess
FreeLibrary
GetFileSize
GetModuleHandleA
GlobalAlloc
GlobalFree
LoadLibraryA
MapViewOfFile
RtlMoveMemory
RtlZeroMemory

comdlg32

GetOpenFileNameA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ