b4259d45dec27c81b2e64d98ca6b230c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4259d45dec27c81b2e64d98ca6b230c_JaffaCakes118
Size

136KB
MD5

b4259d45dec27c81b2e64d98ca6b230c
SHA1

44ef4fc3ea212b0ec359f2dd9f015eafbd2bcd17
SHA256

2e8490a93705419b1e8a58f846cf75d2b2818f3d95ee38dbb41d095ad18ab9ee
SHA512

03ff2d441133993178efe1b786dca87768cbba264c052881aefac04038489bd98ec5cd48ba0bff6c9fcadd2fc7f58f74ffe7ac880ac22af2c94fe7e9c6292de8
SSDEEP

1536:2VTn6xbSgT4dHG539nurrOWmDuHoskCehNRBqV+tZkoMdND4QtKlLSQzH8u:2Zny4donuMg8NRRtZTMvwLSc3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4259d45dec27c81b2e64d98ca6b230c_JaffaCakes118

Files

b4259d45dec27c81b2e64d98ca6b230c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e9a4e06d71d979b1a255a99e8681d1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
LockResource
MultiByteToWideChar

comctl32

InitCommonControls
GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE