d41bf8838ecb2a2717f433b509a4eade_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d41bf8838ecb2a2717f433b509a4eade_JaffaCakes118
Size

97KB
MD5

d41bf8838ecb2a2717f433b509a4eade
SHA1

a287c4b727b4ffb3d6793bc4ae890b53ad916e1c
SHA256

986ca35782deaea1ace057f0b11979636c9f39f88631321b9f4b668313b80c6e
SHA512

a43211b170d1176326a2d718c7dd0fc456ff3a51ec937d210f2d367f43542cbdeee474fdd74f3ad5163eeef343b97ebc905a2ae8d3806e0862adf16c6957b48e
SSDEEP

1536:4zvJ3tywQDW4t/WFTIv/3wwdt3qNRNCIefRpnWIB7QOCZ18xxjwRqXYW4TNB0o0:4zvV4wHAW4uCR3QVq+Hxh0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d41bf8838ecb2a2717f433b509a4eade_JaffaCakes118

Files

d41bf8838ecb2a2717f433b509a4eade_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8aeb2a995688b2e0e80f91a7daade70c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
IsBadReadPtr
VirtualProtectEx
GetConsoleTitleA
lstrlenA
GetStdHandle
GetSystemTime
SetLastError
ResetEvent
EnumResourceTypesW
CloseHandle
CreateMutexA
GetLastError
LoadLibraryExW
Heap32First
CancelIo
GetModuleHandleA
IsDebuggerPresent
LocalFree
FreeConsole

user32

GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetKeyState
GetDlgItemInt
GetParent
CloseWindow
GetMessageA
EndDialog
IsIconic
GetMessageA
EnumWindows
CopyImage
MessageBoxA

setupapi

MyMalloc
SetupCloseLog
MyRealloc
MyFree
IsUserAdmin

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ