a5184fd896e6131308f8c1ea93c97930_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5184fd896e6131308f8c1ea93c97930_JaffaCakes118
Size

67KB
MD5

a5184fd896e6131308f8c1ea93c97930
SHA1

9f001bc881996a09f4cae02837ecedc4502de894
SHA256

3bbdc6c3cb8dcc3e8b08fcd55ac57fe6a0c080dda9b6020f65e01892d74e58ab
SHA512

0fd96d71b69e0b4e8490a188efda8255bff1a75986f504bf4621a1fa3ea8ea3e2dffbd8b2a868f890297e54ad0cbe860d1533fa80e210785f5cacf8dd542369b
SSDEEP

768:cs3nOjZqZNOq1KdZtWG/IHTWQ0sYZumjik7h4n+UNYM2RO8q1mg:X3nOjTXKWQ0sYZ1ishJ82RO8qL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5184fd896e6131308f8c1ea93c97930_JaffaCakes118

Files

a5184fd896e6131308f8c1ea93c97930_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5d620bcb1aee6421eabdf91f8290f421

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
LoadLibraryA
CreateFileW

user32

ShowWindow
CreateWindowExA
RegisterClassExA
InvalidateRect
UpdateWindow
ReleaseDC
GetDC
PostQuitMessage
KillTimer
DestroyWindow
SendMessageA
MoveWindow
SetTimer
GetDialogBaseUnits
GetWindowLongA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
ShowCursor
DefWindowProcA

gdi32

Ellipse
TextOutA
GetStockObject

advapi32

RegCloseKey
RegOpenKeyW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ