d06fdc929dc670548255ff78409a9aea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d06fdc929dc670548255ff78409a9aea_JaffaCakes118
Size

177KB
MD5

d06fdc929dc670548255ff78409a9aea
SHA1

2fed31e84bbb054dc865386e49a2d491084f0a8b
SHA256

1163fbf4d737362bb09e54afff9bd38354a6a05e317d69905c0f0f14ef019d34
SHA512

b23c3882817f098ec6798e4151b50b8f4e9aeb7cb5c54b3c9e81e20761b8645b2476a6be8dcfa522a2b90f5f2e34e0bc2aa721d64a4b286056f16526f6bd8771
SSDEEP

3072:zO+N28l8jsfWmXxFv4vMYWdpcYq6gJSddozWl:znF4sfWmXTEM/Dqp4Rl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d06fdc929dc670548255ff78409a9aea_JaffaCakes118

Files

d06fdc929dc670548255ff78409a9aea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b51dd8fdeedd473402dda47da994ca35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

SizeofResource
MultiByteToWideChar
Sleep
WriteFile
GlobalFree
lstrlenA
lstrcpyA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetTickCount
GlobalAlloc
LockResource
LoadResource
lstrcatA

comctl32

InitCommonControls

shell32

ShellExecuteA
SHGetSpecialFolderPathA

shlwapi

StrStrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE