8d148bcd930cac5b28eb2658f740dfd0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d148bcd930cac5b28eb2658f740dfd0_JaffaCakes118
Size

54KB
MD5

8d148bcd930cac5b28eb2658f740dfd0
SHA1

e663ede2d97edb367481f697972e2e973d72ba71
SHA256

781eb12ed43583be0ce03a03ef8f37f9831a4473dde1ac0c700c8a2bcf85c75e
SHA512

e9e301451a0a50403a2cd6cc9930e024b1e459b46f34a81fc308b42de14f1005facdfb767b2f99411275f7aa3ab1e1bc75f4cdf9809bcf3bc725bb42fa4c8856
SSDEEP

768:y2Jpwno2mNzomidfvvlcM5c1cZXsuLoI9ePcAWHLxcU6QQhfOztQoSol5hX5lj1F:yU2o28zfkbZXsueEFrfuOzt7RXf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d148bcd930cac5b28eb2658f740dfd0_JaffaCakes118

Files

8d148bcd930cac5b28eb2658f740dfd0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

663bf5babd06a014a42c41e4c9f4feed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
GetDC
DrawTextA
GetDlgItem
EndDialog
GetFocus
CopyRect
CloseWindow
IsWindow

kernel32

GetStartupInfoA
lstrcpynA
GetStringTypeA
GetCurrentProcess
TerminateProcess
GetStdHandle
LCMapStringA
lstrcpynW
CreateFileA
GetVersion
GetCommandLineA
GetACP
WriteFile
GetCPInfo
GetModuleFileNameA
SetHandleCount
LCMapStringW
MultiByteToWideChar
GetStringTypeW
lstrcpyA
lstrcatA

advapi32

RegCreateKeyW
RegEnumValueA
RegQueryValueExW
RegEnumKeyA
RegQueryValueA
RegSetValueW
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 531B

IMAGE_SCN_MEM_READ