9d84403a1d3483348e691803d1f35fda_JaffaCakes118 | Triage

Sharing

General

Target

9d84403a1d3483348e691803d1f35fda_JaffaCakes118
Size

93KB
MD5

9d84403a1d3483348e691803d1f35fda
SHA1

eeaec022550b0e7603af26e0fa02492cd4b48c45
SHA256

119a655f8180863569b3104863d1373102a06f936ebd9a69297c6fc3dabab55d
SHA512

157c89abdbc803c923c0c7e6669a6585f73004f011394078d530a35beeaa3664e89334db170d5be2efed2fec09afdc0e8689e590f8c29b9421491c5060bfc795
SSDEEP

1536:30LS22MCIJaiccNvEJTDlbr3fOsyt2+n9oSFGiBmFs7O/gkZiFXznUz:kf2MCIgbcvEJvlbnytdnSiBtO/HZYDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d84403a1d3483348e691803d1f35fda_JaffaCakes118

Files

9d84403a1d3483348e691803d1f35fda_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c142af244776a02069a99d1d8f9e7150

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuItemCount
DestroyMenu
DeleteMenu
CreateMenu
DispatchMessageA
TranslateMessage
UpdateWindow
ShowWindow
GetMessageA
CheckMenuItem
GetCursorPos
GetCursor
SetWindowTextA
GetWindowLongA
LoadIconA
LoadCursorA
RegisterClassExA
BeginPaint
PeekMessageA
CreateWindowExA
EndPaint

gdi32

CreateBitmap
GetStockObject
DeleteObject
Rectangle
GetROP2

ole32

CoGetMalloc
CoInitialize
CreateBindCtx
ReadClassStm

lz32

LZInit

kernel32

LoadLibraryA
FreeLibrary
InitializeCriticalSection
EnterCriticalSection
GetSystemTime
GetLocalTime
DeleteCriticalSection
GetModuleHandleA
GlobalAlloc
GetSystemInfo
GlobalFree
GetLastError
GetCPInfo
HeapAlloc
HeapCreate
LeaveCriticalSection

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE