956fd8f47e5233b1c372aad240cefda7_JaffaCakes118 | Triage

Sharing

General

Target

956fd8f47e5233b1c372aad240cefda7_JaffaCakes118
Size

94KB
MD5

956fd8f47e5233b1c372aad240cefda7
SHA1

cdc9a593d276b260901d93afc2b7b86c827f624d
SHA256

e0178dd34d490918e4065454b030e01c94e908af551ad77cc83fa28b843535d2
SHA512

e388ed8dda69c1988ba94cf69151fa3c285d7cfd88d34879b9d819006216f23441e818e489d7d7dd9421c6a6f2dd25ebeca1d0d6cb236be352b65110799c24f9
SSDEEP

1536:xBs0QKcZ0WwjUnLxWiisz0NjFDpgYf0yc7on9juwmCyAQpKSJWU6:xBVgj3LYsihDm+V8K9jfmCypKsWU6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
956fd8f47e5233b1c372aad240cefda7_JaffaCakes118

Files

956fd8f47e5233b1c372aad240cefda7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b92d6d6a769fba2d8a998369214f6b85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
DestroyWindow
DestroyIcon
DestroyCursor
CreateIcon
CreateDialogIndirectParamA
CreateDesktopA
CopyRect
CopyImage
CharUpperBuffA
CharUpperA
CharToOemA
CharPrevA
ActivateKeyboardLayout

kernel32

GetDateFormatA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
VirtualFree
TlsAlloc
SleepEx
Sleep
SetCurrentDirectoryA
ReadFile
RaiseException
LocalAlloc
GetVersionExA
GetVersion
EnterCriticalSection
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
GetFileSize
GetLastError
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE