b18d36fd51fc480f0f89dfedd4fd858d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b18d36fd51fc480f0f89dfedd4fd858d_JaffaCakes118
Size

93KB
MD5

b18d36fd51fc480f0f89dfedd4fd858d
SHA1

c6ff39cd84150df573fcab3a2649d7b67339c45c
SHA256

74e244b40577ad3ecfe09ec4d3e8471e58f782b81b559551804ff7892cf7fae9
SHA512

d8c28e67943727f445f5f0e299013dcd91b0d468be8985d87a5ec2960d8e273e0713e5e9135e687cf48970689533576c97f23c0827c38787bcec584d6fcabca2
SSDEEP

1536:rmPIcSnHJeSlEaivYtWklNs6hDSDyyKw2ZbjFDuPBNg+uYvb0xlCsofGHb8dctV8:rmAcSJ1lOY8uNsI7NXlYDmMso2ZtVyCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b18d36fd51fc480f0f89dfedd4fd858d_JaffaCakes118

Files

b18d36fd51fc480f0f89dfedd4fd858d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

baca414d331d1a694871e3bc5d0a6582

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DefDlgProcA
CreatePopupMenu
CreateMDIWindowA
CreateAcceleratorTableA
CharUpperBuffA
CharToOemBuffA
CharPrevA
CharNextA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcatA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
SetLastError
RaiseException
CloseHandle
EnterCriticalSection
EnumResourceNamesA
ExitProcess
ExitThread
FindResourceA
GetDateFormatA
GetLocalTime
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersion
GetVersionExA
InitializeCriticalSection
MapViewOfFile

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE