baca0b8967b8c47af058bcdea9600b64_JaffaCakes118 | Triage

Sharing

General

Target

baca0b8967b8c47af058bcdea9600b64_JaffaCakes118
Size

340KB
MD5

baca0b8967b8c47af058bcdea9600b64
SHA1

6e0b1ab036880d34900fc3d50633836323fff4ec
SHA256

69821461a44a78c91671dc61653a1fffb30c1474ae4745db55ecebd8ed697c5a
SHA512

d941d0282fa1b6f0578413930a2c498eea65b38e78e10b5f70dfe4fcb02bc35428ad28f86e3ba892192ac3bf2e66edf7c482beff56dff443c9cc1fadd6f8b02c
SSDEEP

6144:3wtKdKF7Yta2UM5IxXF/tIKAL7iFE7sNBo+aa9R3HJxvkSuM4Pydm5/t/81:R1tUM5aV/oLOVfhaa9ZpVe561

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baca0b8967b8c47af058bcdea9600b64_JaffaCakes118

Files

baca0b8967b8c47af058bcdea9600b64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5246110259d6f6766d8987d00dc8587

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetACP
FreeEnvironmentStringsA
GetModuleHandleA
CloseHandle
lstrlenA
DeleteTimerQueue
LoadLibraryExA
HeapCreate
GlobalUnlock
FindClose
GetConsoleCP
LocalFree
GetLastError
GlobalLock
GetStdHandle
GetDriveTypeA
MapViewOfFile
IsBadReadPtr
CreateFileA

user32

SetFocus
GetSubMenu
CheckMenuItem
GetParent
RedrawWindow
GetMessageA
GetDlgItem
IsMenu
GetDlgItemTextA
ClipCursor
CreateWindowExA
EndDialog
DialogBoxParamA
DrawIconEx

apphelp

SdbCloseDatabase
ApphelpShowDialog
SdbFindFirstTag
ApphelpCheckIME
ApphelpCheckRunApp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ