886f8caf41dc0576d569c639a3b6f46a_JaffaCakes118 | Triage

Sharing

General

Target

886f8caf41dc0576d569c639a3b6f46a_JaffaCakes118
Size

338KB
MD5

886f8caf41dc0576d569c639a3b6f46a
SHA1

257fa55b253279abb4631dfa721ad4f2afb1d748
SHA256

e99e24d20c5f73ac7d4686a107bd04a620153111fbea3923f5c54c2497f8cea0
SHA512

f5763d70fa77be56905587c0c679db6bedfd39a5cd0feee08f5fb23ce95bcd05ef04f69b8aa03af3b63e925ed7091beedd17b9964dea0afff0a3fc48e8b63f40
SSDEEP

6144:RG/+/0BCuXa9EuJDPL26ZGy7jnak1ggDnQD+xY10HMHJICG:R280pdkOD27gIQD+xYWHAPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886f8caf41dc0576d569c639a3b6f46a_JaffaCakes118

Files

886f8caf41dc0576d569c639a3b6f46a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9c85ec1a363c79ca705c22feb76f99c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GlobalLock
LoadLibraryExA
GetSystemTime
CreateEventA
GetConsoleCP
GetLastError
GetACP
lstrlenA
FindClose
IsBadStringPtrA
GlobalUnlock
OpenMutexA
IsBadReadPtr
FreeEnvironmentStringsA
ResumeThread
LocalFree
GetStdHandle
VirtualProtectEx

user32

DialogBoxParamA
SetFocus
CheckMenuItem
CreateWindowExA
GetMessageA
EndDialog
GetMessageA
ClipCursor
IsMenu
GetDlgItemTextA
IsIconic
RedrawWindow
GetSubMenu
DrawIconEx

wldap32

cldap_open
ldap_add
ldap_delete
ldap_compare
ldap_unbind

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ