aed8d5827d44fee2e451dc79afe7b612_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aed8d5827d44fee2e451dc79afe7b612_JaffaCakes118
Size

160KB
MD5

aed8d5827d44fee2e451dc79afe7b612
SHA1

ba05655e60ddd128c7a5345dcad7859bd0de8cd3
SHA256

506fe81c0c884d1667719d9d610fb25b45df7409f16fd5773c6c8d5e63a6e504
SHA512

16d19a246a9fd7eb2a57f4b0e6ece421cec11a8851807e66641627492fe299db3ada4b5eea05801486b5735acca5eafd072c90f3db90a91287d552839b6ca764
SSDEEP

3072:qz/TDqcnQjYkTBpvDjNoyGxkCvnnvu6l7580wXA6oVKZxObS:vSnaBpvlo7xkCvnvum7580wXA6oVxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aed8d5827d44fee2e451dc79afe7b612_JaffaCakes118

Files

aed8d5827d44fee2e451dc79afe7b612_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c84ef6de8ffc795f3ed68b38d06a5e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
Sleep
LocalFree
GetCommandLineA
GetTickCount
GlobalAlloc
lstrcpyA
GetFileSize
GlobalFree
lstrcatA
lstrlenA

msvcrt

wcslen
_controlfp
__set_app_type
_adjust_fdiv
_acmdln

user32

GetMessageA
TranslateMessage
SetFocus
GetClientRect
LoadIconA
CreateWindowExA
EndDialog
SetWindowTextA
ShowWindow
GetFocus
ScreenToClient
DialogBoxParamA
DestroyWindow
BeginPaint
PostQuitMessage

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 225KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ