88882e40b40f044271313d720b8d1fd9_JaffaCakes118 | Triage

Sharing

General

Target

88882e40b40f044271313d720b8d1fd9_JaffaCakes118
Size

698KB
MD5

88882e40b40f044271313d720b8d1fd9
SHA1

4aebfa4f41a7b98b79d987f014e11ae2f07efc32
SHA256

bdf102df9a8b94ba71b856d26e6b9ade878a8bd72bbfb9a7c7995d180c818960
SHA512

604595906e7204bbc68d2f476af50aa91502cddb99bce5d2551069d7cf250fd77f792a60dad672cc450267d452e8fbb4fd6a732cb7106c9c5dc6bde10d8a7e53
SSDEEP

12288:zWkWNb30p68E0X4xMSP41Gqv1CMrNtn8jm9lhFSNMaVrqs3Vc9hH:Kxp3LGs41/3rLn8jm9l/SNMaUs3+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88882e40b40f044271313d720b8d1fd9_JaffaCakes118

Files

88882e40b40f044271313d720b8d1fd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65149329a283a48a89eec582b9f17bc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetVersionExA
GetCommandLineA
LocalAlloc
LocalFree
lstrcpyA
Sleep
GetModuleHandleA

gdi32

GetTextExtentPoint32A
CreateSolidBrush
CreateFontIndirectA
GetPixel
SetBkMode
GetBkColor

user32

EndDialog
GetSysColor
CreateWindowExA
SetWindowTextA
DestroyWindow
LoadIconA
MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ