8be28c1d376d6c9198d88dbc67cfd822_JaffaCakes118 | Triage

Sharing

General

Target

8be28c1d376d6c9198d88dbc67cfd822_JaffaCakes118
Size

357KB
MD5

8be28c1d376d6c9198d88dbc67cfd822
SHA1

e20afb572766a0898bbd2cdcae9a0d510337c4d1
SHA256

3b631c766c2b80280b1404df549f54d08645b3c26ea05221899256061a3ab711
SHA512

d8610c368a9e57305e256d1c1cfbdc4898fc64f0a9f4549b5db5ff6fc112f50ac2a8708d06aab731877c6b0fc13cd6a25cd7e3e32aefc6e67d7671ab168adea4
SSDEEP

6144:187mQm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFN2LuPbNNi04w:coMAxQ1bH8azq0SFN2SBw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8be28c1d376d6c9198d88dbc67cfd822_JaffaCakes118

Files

8be28c1d376d6c9198d88dbc67cfd822_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d93c4f73ccc23d49cbd089b795c40711

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
CloseHandle
GetModuleHandleA
lstrlenA
CancelIo
FreeConsole
GetStdHandle
SetLastError
ResetEvent
IsBadReadPtr
LocalFree
LoadLibraryExW
Heap32First
VirtualProtectEx
GetConsoleTitleA
GlobalLock
GetLastError
EnumResourceTypesW
CreateMutexA
IsDebuggerPresent

user32

DialogBoxParamA
GetMessageA
CloseWindow
GetMessageA
CreateWindowExA
GetDlgItemTextA
GetParent
CopyImage
GetKeyState
IsIconic
EndDialog
GetDlgItemInt
EnumWindows
MessageBoxA

setupapi

MyFree
SetupCloseLog
IsUserAdmin
MyRealloc
MyMalloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ