d28f6f2e575b56ed7e3c13fc59e84e3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d28f6f2e575b56ed7e3c13fc59e84e3d_JaffaCakes118
Size

50KB
MD5

d28f6f2e575b56ed7e3c13fc59e84e3d
SHA1

a50da57d2b53c5f7ea9c967da6738c68b6f750d0
SHA256

e8b616dbc7a294e168ded95a665541e0fabc91a1262ed3920a2de1594a8f8639
SHA512

bc294fa528de1644c92c7c6d11c49122ef12d0047693ed9f5271b37c5b36af443b530efca32b45ebdf6562c927d611e97bdbd7e2aaaaff29ea2dad60552c23a6
SSDEEP

1536:Rid1pR1yssyIDnCqBgbffGmI6Kh/P3rVdBnC:Rid1pR1yssrCqOI6Kh/P7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d28f6f2e575b56ed7e3c13fc59e84e3d_JaffaCakes118

Files

d28f6f2e575b56ed7e3c13fc59e84e3d_JaffaCakes118
.exe windows:3 windows x86 arch:x86

cd454ca56685b2a97fcde4f20c6436f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CreateThread
DeleteCriticalSection
FreeLibrary
GetCommandLineA
GetCurrentProcessId
GetModuleHandleA
HeapFree
LoadLibraryA
LocalAlloc
QueryPerformanceCounter
UnhandledExceptionFilter
lstrlenA

user32

CharNextA
EndDialog
GetCapture
GetClientRect
GetDC
GetDlgItem
GetKeyboardType
GetWindowLongA
IsChild
IsDlgButtonChecked
IsIconic
MessageBoxA
SetDlgItemTextA
SetWindowLongA
SetWindowPos
SetWindowTextA

Sections

CODE
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ