cf6b1a9c6856490d6116eab96fb89eb8_JaffaCakes118 | Triage

Sharing

General

Target

cf6b1a9c6856490d6116eab96fb89eb8_JaffaCakes118
Size

342KB
MD5

cf6b1a9c6856490d6116eab96fb89eb8
SHA1

3cb76b9c023f83e7ebdaeaf86f693d9ff4c892ae
SHA256

56085cba78cfaee26b76868ca6fb463755e1b48cadb5a0e2c0cbdae380ffc8f7
SHA512

b6456331ecca20ab487dddc04a4bdd39092275e6e09b596aefb91ffd8f155f3c2acd2d8f00388e1d8371b202d62e4aa4a1f51f3b0134a5fdb3875f267e26747c
SSDEEP

6144:Wg0NZtfLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/fzdx:7eFhgh2R8O+yFqpLh+zdx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf6b1a9c6856490d6116eab96fb89eb8_JaffaCakes118

Files

cf6b1a9c6856490d6116eab96fb89eb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

092f46d2007d76697a333d4d7aa01187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
CreateFileMappingA
IsBadReadPtr
IsDebuggerPresent
CreateEventA
GetConsoleCP
FreeEnvironmentStringsA
GlobalLock
CreateWaitableTimerA
CloseHandle
HeapCreate
FindClose
CreateFileA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

GetParent
IsMenu
ClipCursor
SetFocus
GetDlgItem
GetDlgItemTextA
DialogBoxParamA
DispatchMessageA
GetSubMenu
EndDialog
GetMessageA
RedrawWindow
CheckMenuItem
DrawIconEx

apphelp

ApphelpCheckIME
ApphelpShowDialog
ApphelpCheckRunApp
SdbCloseDatabase
SdbFindFirstTag

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ