b7bf5165565acb6475db97f8657d59a2_JaffaCakes118 | Triage

Sharing

General

Target

b7bf5165565acb6475db97f8657d59a2_JaffaCakes118
Size

93KB
MD5

b7bf5165565acb6475db97f8657d59a2
SHA1

546bc1dbb6b56b26bfe007e3084106f7aa1155f7
SHA256

c1372f306357d41dd577ccd29dbcfe8b69a615b2c72f1bc81d64aa24773ca927
SHA512

7cb6f296575a49ba1dfd3928e69d64829e6f92b79f35249b2a50c3991ba0f17498c1ee72c334871a92ce33222334831bf1b96b8e459800d564cb6b1e57b1fb57
SSDEEP

1536:rmPIcSnHJeSlEaivYtWklNs6hDSDyyKw2ZbjFDuPBNg+uYvb0xlCsofGHb8dctVt:rmAcSJ1lOY8uNsI7NXlYDmMso2ZtVyCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7bf5165565acb6475db97f8657d59a2_JaffaCakes118

Files

b7bf5165565acb6475db97f8657d59a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

baca414d331d1a694871e3bc5d0a6582

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DefDlgProcA
CreatePopupMenu
CreateMDIWindowA
CreateAcceleratorTableA
CharUpperBuffA
CharToOemBuffA
CharPrevA
CharNextA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcatA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
SetLastError
RaiseException
CloseHandle
EnterCriticalSection
EnumResourceNamesA
ExitProcess
ExitThread
FindResourceA
GetDateFormatA
GetLocalTime
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersion
GetVersionExA
InitializeCriticalSection
MapViewOfFile

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE