bba9574684102bf475588a2e40aa15c0_JaffaCakes118 | Triage

Sharing

General

Target

bba9574684102bf475588a2e40aa15c0_JaffaCakes118
Size

307KB
MD5

bba9574684102bf475588a2e40aa15c0
SHA1

56a5b2dc6b43a571ae192aafabe581280e523485
SHA256

590ab177906673983aae9b381e083acc85efc090ee3b9b464c8b9da02cc34d5b
SHA512

3e83b62cb75492c868fb8fe218bbdd2e0360e515f25fce937e80ee1c6cda525ac0b17b1bbc545aba0838c30429262264118ff39df6ca09308c5f63c1e084888f
SSDEEP

6144:cHmkeLzUnCuUIiJD6vBccFrEDQmW7OK0jq/7YRwmvOO3hsxbpxdhxL+IfE3Qhlz:cHt6ICnIiJD6v/FrQQ1OKbYeAOO34pFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bba9574684102bf475588a2e40aa15c0_JaffaCakes118

Files

bba9574684102bf475588a2e40aa15c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68f4bd3f55b0aecfb31bccf206f5db25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LoadLibraryA
CloseHandle
VirtualAlloc
Sleep
lstrcatA
lstrcpynA
OutputDebugStringA
lstrcpyA
GetBinaryTypeA
SetLastError
GetCPInfo
GetModuleHandleA
GetCommandLineA
UnlockFile
ExitProcess
LockFile
CreateFileA
GetACP
GetLastError
FreeConsole

user32

MessageBoxA
KillTimer
CreateMenu
SetTimer
GetProcessWindowStation
GetParent

gdi32

DeleteObject
CreateCompatibleDC

comdlg32

ChooseFontA

ole32

CoInitialize

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 938B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ