a0f1cd20775f9e1ed0b40fb9122f529f_JaffaCakes118 | Triage

Sharing

General

Target

a0f1cd20775f9e1ed0b40fb9122f529f_JaffaCakes118
Size

155KB
MD5

a0f1cd20775f9e1ed0b40fb9122f529f
SHA1

639f8cd398fea2b12373c8ee4db5c3c6d7185517
SHA256

f0279fe1b492cb8e9fe74fa7cedbf6de3adb6eb8106cfbc52cf4b1d4cdf27d96
SHA512

483ab2ba34c301dad32e112813c52983362f103dd22fe7821184beab26f75854d2f86dcf436f93a23e8bd0e78b00509dac5dcf02ca81c1b698e5d10bef302ddf
SSDEEP

3072:9a+huKQDjjM78IWjdJWZdSleKY5MG0inih23hGB2odHwQxswNoqMbFNN:9ZuKQDLIWJS+49vnXhGB2C3swUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f1cd20775f9e1ed0b40fb9122f529f_JaffaCakes118

Files

a0f1cd20775f9e1ed0b40fb9122f529f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bb7eeeafe67205a14da1a965fd704d0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA
lstrcmpA
GetStartupInfoA
GetModuleHandleA
ReadConsoleA
FreeConsole
lstrlenA
Sleep
OutputDebugStringA
OutputDebugStringW

user32

ShowWindow
KillTimer
MessageBoxA
InsertMenuA
EnableMenuItem
CreateWindowExA
CallWindowProcA
GetParent
IsWindow
DefWindowProcA
UpdateWindow

gdi32

PolyTextOutA
StretchBlt
TextOutA
CreateDCA
GetFontData
DeleteDC
SelectObject

comdlg32

GetSaveFileNameA
ChooseFontA

shell32

ShellExecuteA
SHGetFileInfoA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ